Re: doveadm pw usage

2022-04-25 Thread dovecot
> Can this problem not be solved by using `pw -p "$(some cmd to echo the
> password)"`?


There is also the history command which would show passwords on command lines.
Don't supply a password on the command line and doveadm will prompt you to type 
an invisible password same as linux passwd does.

   doveadm pw -s [scheme]


Re: doveadm pw usage

2022-04-25 Thread Sam Kuper
On Mon, Apr 25, 2022 at 07:30:16PM +1200, Richard Hector wrote:
> The downside of putting the password on the command line is that it
> will (briefly) be visible in the output of 'ps':
> 
> richard   9449  0.0  0.0   5040  3616 pts/4R+   19:27   0:00
> /usr/bin/doveconf -f service=doveadm -c /etc/dovecot/dovecot.conf -m
> doveadm -e /usr/bin/doveadm pw -p asdf

Can this problem not be solved by using `pw -p "$(some cmd to echo the
password)"`?

E.g. if using Jason Donenfeld's password store application "pass",[1]:

pw -p "$(pass Email/mydomain.com)"

Sam

[1]: https://git.zx2c4.com/password-store/about/


Re: doveadm pw usage

2022-04-25 Thread Richard Hector

On 24/04/22 22:45, ミユナ (alice) wrote:

ok the helps says:

pw   [-l] [-p plaintext]

i just thought it specifies the text file.

thanks for clarifying it.



Bernardo Reino wrote:
The argument to "-p" is not a file containing the password, but the 
password itself!



The downside of putting the password on the command line is that it will 
(briefly) be visible in the output of 'ps':


richard   9449  0.0  0.0   5040  3616 pts/4R+   19:27   0:00 
/usr/bin/doveconf -f service=doveadm -c /etc/dovecot/dovecot.conf -m 
doveadm -e /usr/bin/doveadm pw -p asdf


Cheers,
Richard


Re: doveadm pw usage

2022-04-24 Thread Sam Kuper
On Sun, Apr 24, 2022 at 06:45:19PM +0800, ミユナ (alice) wrote:
> Bernardo Reino wrote:
>> The argument to "-p" is not a file containing the password, but the
>> password itself!
>
> ok the helps says:
> 
> pw   [-l] [-p plaintext]
> 
> i just thought it specifies the text file.
> 
> thanks for clarifying it.

Easy mistake to make.

The orthographic difference between "plaintext" and "plain text" is
small.

The semantic difference is large:

https://en.wikipedia.org/wiki/Plaintext

https://en.wikipedia.org/wiki/Plain_text


Re: doveadm pw usage

2022-04-24 Thread alice

ok the helps says:

pw   [-l] [-p plaintext]

i just thought it specifies the text file.

thanks for clarifying it.



Bernardo Reino wrote:
The argument to "-p" is not a file containing the password, but the 
password itself!


Re: doveadm pw usage

2022-04-24 Thread Bernardo Reino

On Sun, 24 Apr 2022, ミユナ (alice) wrote:


Hello

when i want to assign a password to a user, I need to write the plain passwd 
to a text file then do:


# doveadm pw -p input.txt
{CRAM-MD5}77180880...


it's not that convenient to write to a file first.

does it support the format below?

doveadm pw "plain password"

providing the plain password as CL argument to generate a encrypted one.


The argument to "-p" is not a file containing the password, but the password 
itself!


so in your example above, the password would be "input.txt", which is pretty 
weak :)


Cheers.
PS: man doveadm-pw

doveadm pw usage

2022-04-23 Thread alice

Hello

when i want to assign a password to a user, I need to write the plain 
passwd to a text file then do:


# doveadm pw -p input.txt
{CRAM-MD5}77180880...


it's not that convenient to write to a file first.

does it support the format below?

doveadm pw "plain password"

providing the plain password as CL argument to generate a encrypted one.

thank you
ミユナ alice