After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 745012 - "nmcli --ask" shows password in clear text
"nmcli --ask" shows password in clear text
Status: RESOLVED DUPLICATE of bug 759116
Product: NetworkManager
Classification: Platform
Component: nmcli
1.0.x
Other Linux
: Normal normal
: ---
Assigned To: NetworkManager maintainer(s)
NetworkManager maintainer(s)
Depends on:
Blocks:
 
 
Reported: 2015-02-23 13:24 UTC by Peter Janeck
Modified: 2016-03-18 08:28 UTC
See Also:
GNOME target: ---
GNOME version: ---


Description Peter Janeck 2015-02-23 13:24:44 UTC 
The command line tool of network manager shows the password in clear text if I start it with:
nmcli --ask c up eduroam
Eduroam is secured with WPA2 Enterprise -- PEAP -- MSCHAPv2
It would be great to show stars (*) or hashes (#).
Comment 1 Peter Janeck 2015-03-14 13:11:17 UTC 
I found out that the secret object is generated as desired:
secret = nm_secret_agent_simple_secret_new (_("Password"),
		             NM_SETTING (s_8021x),
		             NM_SETTING_802_1X_PASSWORD,
		             TRUE); <-- the boolean to hide the password?
[nm-secret-agent-simple.c l:214ff]

My guess would be that the call back function doesn't check the password boolean correctly. 
...
And it is exactly as I thought:
pwd = nmc_readline ("%s (%s): ", secret->name, secret->prop_name);
[client/cli/common.c l:929]
The callback function doas not check if the secret "password value" is true.
I did some googleing and gnu readline is not suppost to hide characters on user input. So it would be nice to have it case sensitive in the nmc_readline() function.
Comment 2 Beniamino Galvani 2016-03-18 08:28:46 UTC 

*** This bug has been marked as a duplicate of bug 759116 ***