Browse Source

Use the same warning in all three documents about ssh authentication. PR 43941.

git-svn-id: https://svn.apache.org/repos/asf/ant/core/trunk@677222 13f79535-47bb-0310-9956-ffa450edef68
remotes/1776816827838153613/tmp_25f451bd36ab3145e487fcb2cd5c62c571e5b602
Stefan Bodewig 18 years ago
parent
commit
795504806c
1 changed files with 7 additions and 4 deletions
  1. +7
    -4
      docs/manual/OptionalTasks/sshexec.html

+ 7
- 4
docs/manual/OptionalTasks/sshexec.html View File

@@ -205,13 +205,16 @@ substitution and include the password on the command line. For example:<br>
password=&quot;${password}&quot;
command=&quot;touch somefile&quot;/&gt;
</pre>
Invoke ant with the following command line:
Invoking ant with the following command line:
<pre>
ant -Dusername=me -Dpassword=mypassword target1 target2
</pre>
which trades hard coded passwords for the possibility that any other
user tracing processes on the machine running Ant (or reading your
command shell's history) may now read the password.

Is slightly better, but the username/password is exposed to all users
on an Unix system (via the ps command). The best approach is to use
the
<code>&lt;input&gt;</code> task and/or retrieve the password from a (secured)
.properties file.
</p>
</body>
</html>

Loading…
Cancel
Save