This Bugzilla instance is a read-only archive of historic NetBeans bug reports. To report a bug in NetBeans please follow the project's instructions for reporting issues.

Bug 193978 - option to have passwords in the clear and get rid of master password dialog
Summary: option to have passwords in the clear and get rid of master password dialog
Status: NEW
Alias: None
Product: platform
Classification: Unclassified
Component: Options&Settings (show other bugs)
Version: 6.x
Hardware: PC Linux
: P3 normal with 4 votes (vote)
Assignee: Theofanis Oikonomou
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-01-03 15:00 UTC by marcopar
Modified: 2011-11-04 11:32 UTC (History)
4 users (show)

See Also:
Issue Type: ENHANCEMENT
Exception Reporter:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description marcopar 2011-01-03 15:00:03 UTC
There are situations in which encrypting is not needed.
In these situations the master password dialog is only a nuisance.

Let me choose if my passwords need to be encrypted or not.

Reading forums and issue logs i believe this feature will be much appreciated

Thanks
Comment 1 marcopar 2011-01-03 15:35:33 UTC
NOTES:
Log follows at the end of the comment.

I use KDE and i disabled kwallet, this is why, i presume, a master password is asked by Netbeans

I disabled KWallet for the same reason i want to disable Netbeans master password, i do not need it.

Please also note that i had to add -J-Dorg.netbeans.modules.keyring.level=0 to the netbeans.conf of the installation directory because adding it to app.conf in my user.dir won't work. This behavior seems bugged to me since not all people can have access to the install directory of netbeans.

log follows:

FINEST [org.netbeans.modules.keyring]: reading: [/opt/sges-v2]deployer:Sun:AppServer::localhost:4862
FINE [org.netbeans.modules.keyring.kde.KWalletProvider]: executing [qdbus, org.kde.kwalletd, /modules/kwalletd, org.kde.KWallet.isEnabled]
FINE [org.netbeans.modules.keyring.kde.KWalletProvider]: application exit with code 2 for commandString: [qdbus, org.kde.kwalletd, /modules/kwalletd, org.kde.KWallet.isEnabled]
FINE [org.netbeans.modules.keyring.gnome.GnomeProvider]: no GNOME_KEYRING_* environment variable set
FINE [org.netbeans.modules.keyring.win32.Win32Protect]: not running on Windows
FINE [org.netbeans.modules.keyring.impl.Utils]: chmod go-r /home/marcopar/.netbeans/6.9/config/Preferences/org/netbeans/modules/keyring.properties
WARNING [org.netbeans.modules.keyring.fallback.MasterPasswordEncryption]: Falling back to master password encryption; add -J-Dorg.netbeans.modules.keyring.level=0 to netbeans.conf to see why native keyrings could not be loaded
FINE [org.netbeans.modules.keyring.fallback.FallbackProvider]: Using provider: org.netbeans.modules.keyring.fallback.MasterPasswordEncryption@a518b6
FINE [org.netbeans.modules.keyring.impl.Utils]: chmod go-r /home/marcopar/.netbeans/6.9/config/Preferences/org/netbeans/modules/keyring/general.properties
INFO [org.netbeans.modules.editor.settings.storage.SettingsType]: Preferences settings should reside in 'Preferences' subfolder, see #90403 for details. Offending file 'Editors/text/x-java/properties.xml'
FINE [org.netbeans.modules.keyring.fallback.MasterPasswordEncryption]: switching to new master password
FINE [org.netbeans.modules.keyring.fallback.FallbackProvider]: succeeded in decrypting sample key
FINE [org.netbeans.modules.keyring]: Using provider: org.netbeans.modules.keyring.fallback.FallbackProvider@f98d7a
FINEST [org.netbeans.modules.keyring]: reading: kenai.com.password
Comment 2 feathersanddown 2011-01-30 04:32:48 UTC
Well... marcopar same thing.... I disabled wkallet in my OpenSuse 11.3 because i don't need it. In every project when I use subversion, the IDE show this famous dialog box, IDE log file say:

INFO [org.netbeans.core.ui.warmup.DiagnosticTask]: Total memory 3.155.816.448
FINEST [org.netbeans.modules.keyring]: reading: versioning.subversion.4b:e9:b9:00:c1:34:a7:8b:f8:0d:6b:04:c7:08:26:0a:7b:40:90:81
FINE [org.netbeans.modules.keyring.kde.KWalletProvider]: executing [qdbus, org.kde.kwalletd, /modules/kwalletd, org.kde.KWallet.isEnabled]
FINE [org.netbeans.modules.keyring.kde.KWalletProvider]: application exit with code 2 for commandString: [qdbus, org.kde.kwalletd, /modules/kwalletd, org.kde.KWallet.isEnabled]
FINE [org.netbeans.modules.keyring.gnome.GnomeProvider]: no GNOME_KEYRING_* environment variable set
FINE [org.netbeans.modules.keyring.win32.Win32Protect]: not running on Windows
INFO [org.netbeans.modules.parsing.impl.indexing.RepositoryUpdater]: Resolving dependencies took: 25 ms

is rare the "exit with code 2" ??? please provide more info to debug or solve it. 

  I don't know if it related with a dialog box that appear me everytime I do a "refresh" svn status, it say that fail to authenticate with svn server and EVERY TIME I HAVE TO GO TO TOOLS->OPTIONS->MISCELLANEOUS->VERSIONING->SUBVERSION-> MANAGE CONNECTIONS SETTINGS and then find the project svn url and type user and password (never check the save data options). The first time Netbeans show me a dialog box to put my user/pass to svn repo, but after that it never ask me again, only the fail connection dialog box. =(

Any tips??
Comment 3 converginglight 2011-08-22 14:35:06 UTC
I don't want to rush anyone, but:
are there any chances to see soon that that dialog will become optional?

(The ancient times, when NB didn't have that master password dialog, were much better...)
Comment 4 Jesse Glick 2011-08-22 22:36:22 UTC
-J-Dnetbeans.keyring.no.master=true -J-Dnetbeans.keyring.no.native=true turns off all password storage, in which case passwords are remembered just in memory during an IDE session.
Comment 5 converginglight 2011-08-22 23:05:03 UTC
That's a great option, it works, thanks for that!

It would be really GREAT if it would be an option displayed inside the annoying dialog, so anyone who have problems with it could disable it just like that.
Comment 6 marcopar 2011-08-23 14:45:39 UTC
@Jesse

that's even worse than the master password thing

that way you will be prompted for each different password instead of only once for the master

the way to do it is the old style netbeans one:
password in the clear

a warning for dumb users and if the user chooses to go that way it's his choice and netbeans should not try to think for him on what is right or not
Comment 7 Jesse Glick 2011-08-23 15:27:32 UTC
(In reply to comment #6)
> the way to do it is the old style netbeans one: password in the clear
> 
> a warning for dumb users

Would be easy to implement except for the GUI. While you could provide such an option in the master password dialog, there would be no way to change your mind except by manually deleting part of your user directory, since there is no further associated GUI. Options would be:

1. Enable this mode using a system property, which you would need to find out about somehow and add to netbeans.conf.

2. Create a subpanel in Tools > Options > Miscellaneous (?) to select a keyring provider (Win32, GNOME Keyring, KWallet, Mac Keychain, Oracle Wallet, master password, memory only, cleartext). Tricky because only some native providers will be available. Probably requires an API change (the current SPI is oriented towards automatic selection).

3. Offer the dummy provider in a separate plugin you could download in Plugin Manager; when enabled it would take priority over any other providers. The problem is that some people seem to blindly install every plugin they can find under the assumption that the more plugins they have, the better off they will be. Perhaps the plugin could show a warning dialog when first run, indicating how to disable it.
Comment 8 Yulia Novozhilova 2011-09-20 13:07:26 UTC
*** Bug 189644 has been marked as a duplicate of this bug. ***