cntlm icon indicating copy to clipboard operation
cntlm copied to clipboard

Echo asterisks for password entry

Open zoof opened this issue 4 years ago • 4 comments

It would be helpful to have asterisks echoed during password entry as I use a yubikey for the 2nd half of my password at work and with no feedback, I cannot be sure that a password was entered or that it is the password and not the FIDO OTP.

zoof avatar Mar 11 '21 18:03 zoof

Since asterisks can reveal password length I think many authentication processes especially under Linux do not echo them. It would be totally fine if someone adds an option that enables asterisks, but it should be off by default, so the behavior does not change without explicitly configuring it so.

versat avatar May 24 '21 15:05 versat

That sounds reasonable. Unfortunately, I know no C so I wouldn't be able to take this on.

zoof avatar May 24 '21 16:05 zoof

I see more benefit in better platform integration of keychain. What can also be interesting is to use the current user and his credentials. (SSPI for Windows, NoMAD/JAMF managed Macs, Mac/Linux Keychain).

What do you think?

An interesting project about Local Proxy and NoMAD integration: https://github.com/samuong/alpaca#usage

Px7-941 avatar May 25 '21 10:05 Px7-941

@Px7-941 for proper integration with SSO, ideally you'd use the Kerberos support. In our environment this is allowing things to work transparently as the ticket is obtained when logging in.

jschwartzenberg avatar Sep 06 '21 06:09 jschwartzenberg