Name: qgis-master-pass-cxxplugin
Owner: Boundless
Description: null
Created: 2016-10-12 20:36:39.0
Updated: 2016-11-24 17:13:52.0
Pushed: 2017-10-27 14:41:30.0
Homepage: null
Size: 2293
Language: C++
GitHub Committers
| User | Most Recent Commit | # Commits |
|---|
Other Committers
| User | Most Recent Commit | # Commits |
|---|
This plugin enables storage and synchronization of the master password with an external wallet.
It is based on the cross-platform QtKeychain library.
This library is also available on Debian/Ubuntu:
tkeychain0 - Developement files for qtkeychain
ychain-dev - Qt API to store passwords and other secret data securely
From the library README:
QtKeychain is a Qt API to store passwords and other secret data securely. How the data is stored depends on the platform:
Mac OS X: Passwords are stored in the OS X Keychain.
Linux/Unix: If running, GNOME Keyring is used, otherwise qtkeychain tries to use KWallet (via D-Bus), if available.
Windows: By default, the Windows Credential Store is used (requires Windows 7 or newer). Pass -DUSE_CREDENTIAL_STORE=OFF to cmake use disable it. If disabled, QtKeychain uses the Windows API function CryptProtectData to encrypt the password with the user's logon credentials. The encrypted data is then persisted via QSettings.
In unsupported environments QtKeychain will report an error. It will not store any data unencrypted unless explicitly requested (setInsecureFallback( true )).
Requirements:
The subdirectory keychainbridge contains the source code for the plugin, and is ready to place inside a QGIS source tree; then, you will need to add the following to QGIS/src/plugins/CMakeLists.txt:
SUBDIRECTORY(keychainbridge)
After which, you compile QGIS normally.
If you use the CMakeLists.txt at the root of this directory, you will attempt to build the plugin against an existing install of QGIS, which needs its C++ development headers installed as well.
Upon make install the plugin will be installed into the QGIS's Plugin Path, i.e. QgsApplication::pluginPath().
The wallet is used by default by the plugin but can be disabled through a menu item.
The plugin will try to retrieve the password from the wallet and keep it in sync automatically, but in a few cases it will not be able to capture the new master password and it will need the user to enter it again in order to capture and store it.
If the plugin is enabled when the master password has already been entered by the user, it will prompt the user to store the password in the wallet.
In any case the plugin detects that the password is not synced (like in the case of a password reset), it will prompt the user to store the password in the wallet and the user will need to enter the password again.
If the password stored in the walled is no longer valid, the new password will be stored automatically when the user enters it in the standard credentials dialog.
The plugin documentation can be found in the doc directory, whether and where
to install it is a choice for the packagers, the plugin help button will try to
open an HTML page located by default in QgsApplication::pkgDataPath() + "/doc/master_password_helper/index.html"
(on Linux, it is normally /usr/share/qgis/doc/master_password_helper/index.html),
this location can be customized with a settings entry plugins/master_password_helper/help_uri,
like in the (Python) example below:
ings = QSettings()
ings.setValue("plugins/master_password_helper/help_uri", "/usr/mydocs/password_helper/index.html")