[news.eclipse.technology.ecf] Re: password storage and ui

[Scott Lewis <slewis@xxxxxxxxxxxxx>]

Hi Hallvard,

Hallvard Trætteberg wrote:
> Scott Lewis wrote:
> > Hi Hallvard,
> >
> > I should say that currently the password information is *not* stored 
> > across Eclipse sessions.  The password is not persistently stored on 
> > disk (which is why, if you exit Eclipse and restart, then login to one 
> > of the stored accounts, you will be re-prompted to enter the password).
>
> Well, I am re-prompted to enter the password, but the password I used in 
> the previous session is filled in, so I just have to accept. This also 
> happens if I exit and restart Eclipse.
>
> As suggested in the other reply, I tried removing 
> eclipse/configuration/org.eclipse.core.runtime/.keyring, and that worked 
> as I wanted!

OK, good.  My apologies about the incorrect information WRT persistence.

But note that for ECF 3.0 we will likely be moving to storing account 
information in the Equinox ISecurePreferences storage...perhaps by using 
the org.eclipse.ecf.storage plugin.

Once this is in place, it will be necessary to remove stored passwords 
from the Equinox secure preferences.  There is a UI (in Eclipse 
preferences) for doing this in 3.4, but I'm not sure what it will look 
like in 3.5, as I expect some work in Equinox security to be taking 
place in the Galileo release cycle...and that's not work that this group 
is doing.