It would be nice if one could supply the password along with the username on the command line
ex. lsh -l usr,passwd foo.bar
I know I can go many ways to achieve my goal, but it would be a nice feature
Esben Stien executiv@online.no writes:
It would be nice if one could supply the password along with the username on the command line
ex. lsh -l usr,passwd foo.bar
I know I can go many ways to achieve my goal, but it would be a nice feature
As I'm not sure whatever you (or the others) noticed it, here goes:
This functionality, or kind of the same, at least, was implemented some time ago and is available in lsh 1.5.2 and newer. I'm referring to the askpass options, which lets you specify a binary that should output the requested password/phrase on stdout (what is requested is supplied in argv[1]).
While this isn't exactly what you asked for (and, I admit, a bit cumbersome if you really only want to supply the password on the command line), it's much more flexible (in the aspect of what you can do with it).
/Pontus
Pontus Freyhult pont_lsh_bugs@soua.net writes:
This functionality, or kind of the same, at least, was implemented some time ago and is available in lsh 1.5.2 and newer. I'm referring to the askpass options, which lets you specify a binary that should output the requested password/phrase on stdout (what is requested is supplied in argv[1]).
And the reason we do it this more cumberswome way, instead of simply letting you give a password on the command line, is that command line options are visible to other users (just use ps with the right arguments). Passing the password via a file descriptor is safer.
If you for some reason need to provide a fixed password "gazonk" to lsh, for some scripting or whatever, write an askpass script (which should *not* be readable for other users) like
#! /bin/sh echo gazonk
and use lsh --askpass path-to-that-script.
Regards, /Niels (just back to the net after a four-week vacation)
Esben Stien executiv@online.no writes:
It would be nice if one could supply the password along with the username on the command line
ex. lsh -l usr,passwd foo.bar
I know I can go many ways to achieve my goal, but it would be a nice feature
I could use the --askpass switch to lsh as some have suggested, but it still would be nice supplying it on the command line. I know the switches are visible with ps and that it leaves other traces, but that is my problem. It's ok to have both and to tell about the security weakness in giving the password on the command line. It's my responsibility to think about my security.
And please don't start cc'ing me again. It's a reason I'm on the list.
-
Esben Stien -
nisse＠lysator.liu.se -
Pontus Freyhult