htpasswd is missing a feature there to get the password from a file descriptor.
What the manpage means is probably that one should use -b only when necessary. From a shell script the use of -b might be acceptable because the password will not be put into .bash_history and htpasswd runs only for a very short time (so it's difficult to get the password with ps). A real workaround would be to feed the password to htpasswd with socat (search for ssh in the socat man page for an example), but this is IMHO not suitable for a postinst because of the added dependency. Cheers, Stefan -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

