[prev in list] [next in list] [prev in thread] [next in thread] 

List:       kde-bugs-dist
Subject:    Bug#15517: marked as done (kcontrol reveals samba passwords in partitions applet) by Helge Deller <d
From:       owner () bugs ! kde ! org (Stephan Kulow)
Date:       2001-01-31 20:33:07
[Download RAW message or body]

Your message dated Wed, 31 Jan 2001 21:34:07 +0100
with message-id <01013121340702.01060@P100.helgenet.de>
and subject line (no subject)
has caused the attached bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I'm
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Stephan Kulow
(administrator, KDE bugs database)

Received: (at submit) by bugs.kde.org; 17 Nov 2000 12:08:17 +0000
Received: (qmail 21783 invoked by uid 33); 17 Nov 2000 12:08:17 -0000
Date: 17 Nov 2000 12:08:17 -0000
Message-ID: <20001117120817.21782.qmail@master.kde.org>
To: submit@bugs.kde.org
Subject: kcontrol reveals samba passwords revealed in 'partitions' applet
From: flexx@teleweb.at

Package: unknown
Version: 2.0 Release
Severity: normal
Installed from: SuSE RPM's (update for 6.4 @ ftp.suse.com kbase2.rpm 2000/10/22)

In my /etc/fstab (600 root:root) I mount several smbfs filesystems giving a username \
and a password using the respective mount options.

In the 'partitions' applet of kcontrol (logged in as root), these passwords are \
revealed in the 'Mount Options' column.

I've seen other tools substitute the password with Asterisks (*), which should  be \
done in kcontrol, too.

I use
mount-2.10f
smbmount (mount.smbfs) 2.0.7

sample fstab line:
//pc04295/wrkfiles /mnt/pc04295/wrkfiles smbfs \
workgroup=philosophers,uid=500,gid=100,fmask=700,dmask=700,username=plato,password=70ľa70


I am aware that hardcoding a password in the fstab is not quite elegant, but so far I \
found no other solution to avoid typing 100 passwords when I want to mount multiple \
samba shares.

I can also imagine that the problem is not kcontrol itself, but the underlying API \
(qtlib? glibc?). However, I've seen other tools substitute the password with \
asterisks (*) when printing the mount options, which should be done in kcontrol, too, \
IMHO.

Cheers, and a big thumbs up for KDE 2.0!

Flexx

--------------------------------------
Alexander Wessel
IT Development & Consulting
mailto:flexx@teleweb.at
http://members.teleweb.at/flexx/

(submitted via bugs.kde.org)


[prev in list] [next in list] [prev in thread] [next in thread]