The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Ole Frendved Hansen <olef AT dtu.dk>]

Thanks for your responses, Tomasz,

I will read up on the NetworkManager stuff.


Best regards, 

Ole



Den 14/05/2014 kl. 16.18 skrev Tomasz Wolniewicz 
<twoln AT umk.pl>:

> Hi,
>  Normally, the installer interfaces with NetworkManager settings via dBus 
> and installs the password the same way as NetworkManager does, therefore 
> security risks are the same.
> 
> Password is only stored in plaintext when the wpa_supplicant config file is 
> written, i.e. when NM installation fails. We could display a warning about 
> this telling the user to delete it if he does not want it.
> 
> Special shell characters - looks like an important problem. I will look 
> into it. Thanks
> Tomasz
> 
> 
> W dniu 2014-05-14 15:59, Ole Frendved Hansen pisze:
>> Hi,
>> 
>> The current linux installer from CAT does prompt the user for password and 
>> stores this in plain text.
>> 
>> Will it be possible to open an option for not storing the pwd?
>> Storing the pwd encrypted is of cause another wanted feature.
>> 
>> I have institutions refusing to use CAT for linux based on the plaintext 
>> matter :-/
>> 
>> 
>> A bug to report:
>> We tried just give a star instead of the actual pwd - Oops, this did 
>> shell-expant to filenames in current dir!
>> 
>> Best regards,
>> 
>> Ole
> 
> -- 
> Tomasz Wolniewicz
>          
> twoln AT umk.pl
>         http://www.home.umk.pl/~twoln
> 
> Uczelniane Centrum Informatyczne   Information&Communication Technology 
> Centre
> Uniwersytet Mikolaja Kopernika     Nicolaus Copernicus University,
> pl. Rapackiego 1, Torun               pl. Rapackiego 1, Torun, Poland
> tel: +48-56-611-2750     fax: +48-56-622-1850       tel kom.: 
> +48-693-032-576
> 
>