Browse Source

Use the same warning in all three documents about ssh authentication. PR 43941.

git-svn-id: https://svn.apache.org/repos/asf/ant/core/trunk@677222 13f79535-47bb-0310-9956-ffa450edef68
master
Stefan Bodewig 17 years ago
parent
commit
795504806c
1 changed files with 7 additions and 4 deletions
  1. +7
    -4
      docs/manual/OptionalTasks/sshexec.html

+ 7
- 4
docs/manual/OptionalTasks/sshexec.html View File

@@ -205,13 +205,16 @@ substitution and include the password on the command line. For example:<br>
password=&quot;${password}&quot;
command=&quot;touch somefile&quot;/&gt;
</pre>
Invoke ant with the following command line:
Invoking ant with the following command line:
<pre>
ant -Dusername=me -Dpassword=mypassword target1 target2
</pre>
which trades hard coded passwords for the possibility that any other
user tracing processes on the machine running Ant (or reading your
command shell's history) may now read the password.

Is slightly better, but the username/password is exposed to all users
on an Unix system (via the ps command). The best approach is to use
the
<code>&lt;input&gt;</code> task and/or retrieve the password from a (secured)
.properties file.
</p>
</body>
</html>

Loading…
Cancel
Save