Maven settings through SSO?

Question

I have some developers who are unhappy with storing LDAP username / passwords in settings.xml in order to access Nexus. Their misfortune is partly due to FUD, but also the inconvenience of having to re-encrypt the password every time their LDAP password expires (which is quite common here).

Is there any way to force Maven to use SSO / LDAP? The artifact repository we use is Nexus, and its web interface already uses SSO.

Answer 1

You can enable encryption in the settings.xml file so that it does not sit there in plain text.

http://maven.apache.org/guides/mini/guide-encryption.html#How_to_encrypt_server_passwords

Answer 2

The latest version of Nexus includes a new security token feature to solve this problem. I have not used it yet, but it is documented here:

• http://www.sonatype.com/books/nexus-book/reference/config-sect-usertoken.html