imperative icon indicating copy to clipboard operation
imperative copied to clipboard

zowe config list with password

Open dkelosky opened this issue 4 years ago • 5 comments

For debugging and troubleshooting, it would be nice to have a command to extract and display the current set user name and password that is securely stored. Perhaps, zowe config list --show-secure ?

dkelosky avatar Jan 10 '21 18:01 dkelosky

@MikeBauerCA - would this be ok?

dkelosky avatar Jan 10 '21 18:01 dkelosky

No, I do not want to provide such a command. For debugging, the Zowe CLI logging level can be set to TRACE.

MikeBauerCA avatar Jan 15 '21 18:01 MikeBauerCA

How about in relation to https://github.com/zowe/zowe-cli/issues/870 ?

Perhaps I want to get other secured values for troubleshooting, e.g. extract a token to use / test on postman. Will this also be disallowed?

dkelosky avatar Jan 18 '21 15:01 dkelosky

Knowing the username can be useful for example to construct the JCL header. Knowing the token can be useful to call Zowe-conformant APIs that do not have CLI plugins. It does not decrease the security, the user logged on to the workstation is able to get to the user ID and password. The CLI command makes it possible to use the value in scripts.

plavjanik avatar Jan 18 '21 15:01 plavjanik

For troubleshooting, you could generate a token via zowe auth login apiml --show-token and then provide both the username and token directly on the command line.

I don't fully agree that it does not decrease the security because it makes it easier to access the value. I'll leave the issue open to see if we get a significant number of upvotes from the community.

MikeBauerCA avatar Jan 18 '21 15:01 MikeBauerCA

This enhancement has had no activity for 12 months. The issue also has less than 5 up-votes by the community. No action on this enhancement is targeted for the next 2 calendar quarters. Therefore, this enhancement is being closed. If you feel that this enhancement should continue to be available for community up-votes, you may reopen this issue.

zFernand0 avatar Mar 07 '23 17:03 zFernand0