Menu

#68 Cntlm -H should use /dev/tty for password prompting

v0.93 show-stopper
open
nobody
cntlm -H (1)
5
2014-10-08
2014-10-08
No

Perhaps a feature request:

cntlm -H should write prompts to and read passwords from /dev/tty, not to stdout/from stdin.

This allows using cntlm -H in a pipeline. E.g. when you are updating /etc/cntlm.conf with vi:

:r !cntlm -H -u user -d domain

What this basically does is popen("cntlm -H ...") and insert the resulting output at the current location in the file.

However as currently implemented, the "password:" prompt is not made visible to the user -- it looks like cntlm is hanging. If the user nevertheless enters the password at this point, the "password:" prompt line appears ahead of the hashes that cntlm -H normally generates and must be manually deleted.

For consistency (and possibly security), the password should be read from /dev/tty as well.

Discussion


Log in to post a comment.