Thread: [Passwordsafe-devel] Locking of the File for multiuser environments
Popular easy-to-use and secure password manager
Brought to you by:
ronys
From: Palic, D. <dar...@xe...> - 2006-05-20 22:43:49
|
Hello list, we are using the passwordsafe for our passwords in our company. But we have troubles with the passwordsafe in our multiuser environment, there we cannot guarantee, that only one person has opened the file. I took a look into the src (Passwordsafe SWT) and it seems to be a problem with the missing locking of the open file. Am I right? 1. is there already planed to add a file locking? 2. is such feature needed and/or accepted if I would append it? 3. if so, could someone bootstrap me, so I can figure out, there to add such file locking? best regards, Darko |
From: Glen S. <gl...@by...> - 2006-05-22 10:01:49
|
Darko, Yes, that's correct. There's no support for honoring lock files in the current Java version. I'm spending a bit of time looking at v3 file support for the Java version right now and once that's done I'll take a look at what's involved in implemented a locking mechanism. Actually thinking about reworking some of the file stuff to make new crypto algos a little more pluggable for future versions... but most of the thinking is still very early days... If it's a showstopper for you and need a fix for locking immediately, you're of course welcome to have a dig through the code and make your mods (any patches gratefully received). You need to look in the PasswordSafeLib project to see the code that deals with the file storage and format. Thanks, Glen. Palic, Darko wrote: > Hello list, > > we are using the passwordsafe for our passwords in our company. But we > have troubles with the passwordsafe in our multiuser environment, > there we cannot guarantee, that only one person has opened the file. > > I took a look into the src (Passwordsafe SWT) and it seems to be a > problem with the missing locking of the open file. Am I right? > > 1. is there already planed to add a file locking? > 2. is such feature needed and/or accepted if I would append it? > 3. if so, could someone bootstrap me, so I can figure out, there to > add such file locking? > > best regards, > Darko |