Bug 378921

Summary: NetworkManager-vpnc save group password
Product: [Fedora] Fedora Reporter: Mauricio Teixeira <mauricio.teixeira>
Component: NetworkManager-vpncAssignee: Denis Leroy <denis>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: low Docs Contact:
Priority: low    
Version: 8CC: davidz
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2007-11-21 11:59:44 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Mauricio Teixeira 2007-11-12 22:09:06 UTC 
Description of problem:

In F7 and F7, NetworkManager-vpnc presented two boxes where you could mark to
save either "group password", "user password" or both. In F8, there is a single
"save passwords in keyring" box that will save both user and group passwords.

Version-Release number of selected component (if applicable):

NetworkManager-0.7.0-0.5.svn3030.fc8
NetworkManager-gnome-0.7.0-0.5.svn3030.fc8
NetworkManager-vpnc-0.7.0-0.4.svn3030.fc8

Additional info:

Storing group and user passwords separately is important security-wise. User
passwords may change frequently, but group passwords will probably not change
for a long time. Suppose you leave your computer unlocked, and someone that
knows the group password (a co-worker, for example) tries to use the connection
with your name, if the user password is not stored, the connection won't be
established. Since both passwords are stored there, it's easy for someone to
take control of the desktop and connecting with that user, without having to
know either.
Comment 1 Denis Leroy 2007-11-21 11:59:44 UTC 

*** This bug has been marked as a duplicate of 366361 ***