+- Kodi Community Forum (https://forum.kodi.tv)
+-- Forum: Support (https://forum.kodi.tv/forumdisplay.php?fid=33)
+--- Forum: General Support (https://forum.kodi.tv/forumdisplay.php?fid=111)
+---- Forum: OS independent / Other (https://forum.kodi.tv/forumdisplay.php?fid=228)
+---- Thread: passwords.xml plaintext credentials - how to safely connect to NAS? (/showthread.php?tid=373249)
passwords.xml plaintext credentials - how to safely connect to NAS? - A0A0 - 2023-05-22
Hi!
It shocked me quite much finding out that kodi still stores SMB passwords in plan text in xml file.
What's the recommended way to connect to a remote NAS in a secure way?
Is there any workaround until this bug finally gets fixed?
(I'm running KODI on a unix system)
Thanks a lot for sharing!
H.
RE: passwords.xml plaintext credentials - how to safely connect to NAS? - Klojum - 2023-05-22
(2023-05-22, 12:42)A0A0 Wrote: It shocked me quite much finding out that kodi still stores SMB passwords in plan text in xml file.On the one hand, passwords out to the open may be "shocking", on the other hand we are talking about a video application for local network access. How safe is the OS that runs your Kodi setup?
You could switch from SMB to NFS. Passwords and access are handled differently with NFS.
RE: passwords.xml plaintext credentials - how to safely connect to NAS? - izprtxqkft - 2023-05-22
a feature request was already opened for this - https://forum.kodi.tv/showthread.php?tid=371945
RE: passwords.xml plaintext credentials - how to safely connect to NAS? - A0A0 - 2023-05-23
> Passwords and access are handled differently with NFS.
But according to my understanding NFS doesn't use passwords
RE: passwords.xml plaintext credentials - how to safely connect to NAS? - Klojum - 2023-05-23
True... NFS user access is controlled on the NFS file server. And no, there are no passwords necessary on the NFS/Kodi client. So that's a plus in my book.
RE: passwords.xml plaintext credentials - how to safely connect to NAS? - scott967 - 2023-05-24
Run a VPN server on the remote NAS?
scott s.
.