nssbackup-team team mailing list archive

[Oumar Aziz OUATTARA <wattazoum@xxxxxxxxx>]

Hello Tim,


Tim Johnson a écrit :
> Oumar:
>
> I am going to (hopefully) carve out some time this weekend to work on 
> nssbackup.
>
> I did spend some time thinking about the password problem. Python 
> provides a number of approaches (such as string.translate()) that could 
> be used to encrypt/decrypt a string. Easy for us, but as long as we ship 
> source it would be equally easy for someone to look at the table we used 
> for the translate.

I'll look at it. The solution would be to use an algorithm that has 
*private* and *public* part for encryption. The private part will be 
stored in the configuration file but won't appear in the logs ...

> We need fully document the process for setting up 'ssh' (no password) 
> and remind the user's of the dangers of an unencrypted password.  We can 
> 'steal' this from any one of a number posting on the net on this 
> subject. This should be done regardless.

definitely !

> Would we have to update the SSH Plugin to parse two strings: one with & 
> one without a password in it? Or would we have let the user supply the 
> password separately (change the GUI)?

We will need to update the SSH plugin for sure. But we should keep in 
mind that the GUI should be decoupled from the functional aspect. I have 
been working on getting this to work.
The goal is to be able to install NSsbackup on a Server (with no 
Xserver) and develop a web UI for NSsbackup.
But we might need to change the plugin configuration GUI.

> How would you like me to provide my changes for your review?

IMO, you should register to launchpad, join the team ( 
https://edge.launchpad.net/~nssbackup-team ) and branch the nssbackup 
source ( https://code.edge.launchpad.net/~nssbackup-dev/nssbackup/devel 
) using BZR (https://wiki.ubuntu.com/LaunchpadStepByStepInstructions). 
Then after implementation, you can make a merge request.

> On a separate topic: Do you know how a create a popup containing a 
> status bar? I know of two different kinds: a '% Done' and simple moving 
> bar to indicate process is being made.

I have tried this one, and searched for a solution and I have not 
succeeded yet. You can check this out in the NSsbackup BZR branch .

> Note the different Email address. I have better access to this account. 
> The other account is only available when I am at work.
>
> --
> ------------------------------------------------------------------------
> Tim Johnson     Scuba Diver        
>    (503) 629-8625   (Home)
>    (503) 757-9012   (Cell)

Attachment: signature.asc
Description: OpenPGP digital signature