[prev in list] [next in list] [prev in thread] [next in thread] 

List:       kde-devel
Subject:    Re: kpassd
From:       <uwe () uwix ! alt ! na>
Date:       1999-02-24 22:03:44
[Download RAW message or body]

On Wed, 24 Feb 1999, Waldo Bastian wrote:

> Geert Jansen wrote:
> 
> > It was pointed out to me that there was already something like this, a
> > proggie called "kdesu" by Pietro Iglio. I talked with Pietro and we agreed
> > that we are going to merge the projects and that I will continue with it.
> 
> Good work! :)
> 
> [snip]
> > This could be implemented using a "kpassd", a daemon that listens to a unix
> > domain socket (a la kfm) and keeps track of KDE passwords. We'll have one
> > daemon per user. The daemon is started in startkde and killed on exit. Every
> > password is accompanied by an ID so more programs can use this daemon in
> > multiple contexts. I think this approach is better than a file.
> > 
> > What do you think of this? If there is some demand for it, I'll take the
> > gauntlet :) I'm not going to do it if nobody wants it...
> 
> By default all my hairs rise when someone wants to store passwords
> somewhere...

Please don't store passwords at all unless they are encrypted.

Uwe

> 
> ...but this version might have some potential. It is of course very
> important
> that only processes of the user itself can ask this daemon for
> passwords.
> KFM/Konqueror especially the kioslaves might want to use this service as
> well
> instead of remembering passwords themselves. That way we can enforce a
> policy
> on how to handle passwords in a central place. 
> 
> Cheers,
> Waldo
> 

-------------------------------------------------------------------------
Uwe Thiem                                        Tel: +264 - 061 - 244511
P.O.Box 30955                                    Fax: +264 - 061 - 244511
Windhoek                                         Email:   uwe@uwix.alt.na
Republic of Namibia                                           uwe@kde.org
                                                       http://www.kde.org
                  **********************************
         You can still escape from the GATES of hell: Use KDE!
-------------------------------------------------------------------------

[prev in list] [next in list] [prev in thread] [next in thread]