Red Hat Bugzilla – Bug 428295
Korganizer's groupwise module can not be configured not to store password in plaintext
Last modified: 2015-01-07 19:16:17 EST
Description of problem:
From Novell Bugzilla (see URL):
The groupwise module of korganizer stores the password in plain text in
.kde/share/config/kresources_kcal_groupwiserc and there is no way to avoid
that: if you delete the password from this file, starting korganizer fails with
an "invalid password" message. It should at least be possible to enter the
password "on demand".
... and/or offer use of kwallet
This, by itself is not a security issue, but would be nice to have fixed.
Final Freeze is in effect now. Security fixes almost certainly warrant a freeze
break, so in case you build a fix for this, mail release engineering as
described here: 
Changing version to '9' as part of upcoming Fedora 9 GA.
More information and reason for this action is here:
There has been no movement on this issue. Do we want to address this or send it
The information we've requested above is required in order
to review this problem report further and diagnose or fix the
issue if it is still present. Since it has been thirty days or
more since we first requested additional information, we're assuming
the problem is either no longer present in the current Fedora release, or
that there is no longer any interest in tracking the problem.
Setting status to "CLOSED INSUFFICIENT_DATA". If you still
experience this problem after updating to our latest Fedora
release and can provide the information previously requested,
please feel free to reopen the bug report.
Thank you in advance.
I'd say this does not qualify as a bug. If you want more secure password
storage methods to be used (e.g. KWallet, which IMHO is the right tool for the
job), the right place to address this issue is upstream.