Return-Path: 
 <user-return-51481-apmail-ant-user-archive=ant.apache.org@ant.apache.org>
Delivered-To: apmail-ant-user-archive@www.apache.org
Received: (qmail 56193 invoked from network); 1 Aug 2005 11:51:27 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199)
  by minotaur.apache.org with SMTP; 1 Aug 2005 11:51:27 -0000
Received: (qmail 49665 invoked by uid 500); 1 Aug 2005 11:51:23 -0000
Delivered-To: apmail-ant-user-archive@ant.apache.org
Received: (qmail 48881 invoked by uid 500); 1 Aug 2005 11:51:20 -0000
Mailing-List: contact user-help@ant.apache.org; run by ezmlm
Precedence: bulk
List-Unsubscribe: <mailto:user-unsubscribe@ant.apache.org>
List-Help: <mailto:user-help@ant.apache.org>
List-Post: <mailto:user@ant.apache.org>
List-Id: "Ant Users List" <user.ant.apache.org>
Reply-To: "Ant Users List" <user@ant.apache.org>
Delivered-To: mailing list user@ant.apache.org
Received: (qmail 48867 invoked by uid 99); 1 Aug 2005 11:51:19 -0000
Received: from asf.osuosl.org (HELO asf.osuosl.org) (140.211.166.49)
    by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 01 Aug 2005 04:51:19 -0700
X-ASF-Spam-Status: No, hits=0.0 required=10.0
	tests=RCVD_BY_IP,SPF_HELO_PASS,SPF_PASS
X-Spam-Check-By: apache.org
Received-SPF: pass (asf.osuosl.org: domain of antuser@gmail.com designates
 64.233.184.204 as permitted sender)
Received: from [64.233.184.204] (HELO wproxy.gmail.com) (64.233.184.204)
    by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 01 Aug 2005 04:51:10 -0700
Received: by wproxy.gmail.com with SMTP id 50so994225wri
        for <user@ant.apache.org>; Mon, 01 Aug 2005 04:51:17 -0700 (PDT)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
        s=beta; d=gmail.com;
        h=received:message-id:date:from:reply-to:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
        b=Ep0lQOenSJLBdB1/lLOrQ0C4tutokpKJwNcwitCEkPfWtUR6aKVuorwlcFSOD3Z8L6RTrwc//FxQ1uauMeuozubgPb61WTgA8aJS/rI3ERVdg/N8+ktJ7DGVnlV526ekv4bEG4Bwp98g6g/VJ3xGlgSaqdp4mbKO7PtWDxUsj+M=
Received: by 10.54.120.12 with SMTP id s12mr2764755wrc;
        Mon, 01 Aug 2005 04:51:17 -0700 (PDT)
Received: by 10.54.15.39 with HTTP; Mon, 1 Aug 2005 04:51:17 -0700 (PDT)
Message-ID: <a3d431a3050801045118350e9b@mail.gmail.com>
Date: Mon, 1 Aug 2005 13:51:17 +0200
From: Patrick Martin <antuser@gmail.com>
Reply-To: Patrick Martin <antuser@gmail.com>
To: Ant Users List <user@ant.apache.org>
Subject: Re: concealing passwords
In-Reply-To: <42EE070F.9020507@apache.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
References: <6.2.3.0.0.20050730062053.03b40008@mail.mindprod.com>
	 <42EE070F.9020507@apache.org>
X-Virus-Checked: Checked by ClamAV on apache.org
X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N

Hello,

You can also get the user input via an antform [1] UI which can star passwo=
rds:

<antform>
  <textProperty label=3D"enter a password" property=3D"my.password"
password=3D"true" />
</antform>

Not tested, but something like that should work.

[1] http://antforms.sourceforge.net/

On 8/1/05, Steve Loughran <stevel@apache.org> wrote:
> Roedy Green wrote:
> > I notice that in all the scripts I have seen people just insert their
> > passwords as plain text in the scripts, e.g. for jarsigning.
> >
> > I don't want to do that since I will be distributing the scripts along
> > with source code.
> >
> > It seems there are several ways you could handle it:
> > 1. put the password in the registry.
> > 2. make the password a system property you insert from a set variable.
> > 3. put it in a file
> > 4. something cleverer that makes you enter it and it remembers for a fe=
w
> > hours.
> >
> > I wondered what is considered standard practice.
> >
>=20
> -beware of passing things on the command line, as on unix its visible to
> all users via the ps command
> -you can use <input> to ask for a password; it will be echoed (java's fau=
lt)
>=20
> I keep passwords in properties files in a subdirectory that is locked
> down with very restricted access, not in SCM.
>=20
> -steve
>=20
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@ant.apache.org
> For additional commands, e-mail: user-help@ant.apache.org
>=20
>

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@ant.apache.org
For additional commands, e-mail: user-help@ant.apache.org