The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Tomasz Wolniewicz <twoln AT umk.pl>]

Hi,
  Normally, the installer interfaces with NetworkManager settings via 
dBus and installs the password the same way as NetworkManager does, 
therefore security risks are the same.

Password is only stored in plaintext when the wpa_supplicant config file 
is written, i.e. when NM installation fails. We could display a warning 
about this telling the user to delete it if he does not want it.

Special shell characters - looks like an important problem. I will look 
into it. Thanks
Tomasz


W dniu 2014-05-14 15:59, Ole Frendved Hansen pisze:
> Hi,
>
> The current linux installer from CAT does prompt the user for password and 
> stores this in plain text.
>
> Will it be possible to open an option for not storing the pwd?
> Storing the pwd encrypted is of cause another wanted feature.
>
> I have institutions refusing to use CAT for linux based on the plaintext 
> matter :-/
>
>
> A bug to report:
> We tried just give a star instead of the actual pwd - Oops, this did 
> shell-expant to filenames in current dir!
>
> Best regards,
>
> Ole

--
Tomasz Wolniewicz
          
twoln AT umk.pl
        http://www.home.umk.pl/~twoln

Uczelniane Centrum Informatyczne   Information&Communication Technology Centre
Uniwersytet Mikolaja Kopernika     Nicolaus Copernicus University,
pl. Rapackiego 1, Torun               pl. Rapackiego 1, Torun, Poland
tel: +48-56-611-2750     fax: +48-56-622-1850       tel kom.: +48-693-032-576