[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Password display problem with ldapmodify (ITS#363)



On Wed, 17 Nov 1999, kurt@boolean.net wrote:

> At 07:14 AM 11/15/99 GMT, richarde@eskom.co.za wrote:
> >Full_Name: Richard Ellerbrock
[...]
> >in unix speak). Well, doing a ps -ef allows anybody to see the password during 
> >the update process. Have the development team thought of modifying the process 
> >display to blank out the password. I have seen other applications do this -
> >MySQL is one of them.
> 
> Thanks for the suggestion.  We'll put this into the queue.

Sendmail is another such application that can modify its appearance in the
process table;  problem is, not all platforms support this capability (eg.,
SunOS 4.x does, SunOS 5.x doesn't) which means you'd still need some other
method to "protect" other platforms...


dave