Some feedback on the KeePass wiki page

[mehmetb]

Hooray for new recruits: OsTicket and KeePass, it is always nice to have fresh web apps waiting to be discovered

Here's some feedback on KeePass wiki page...

- The link specified in the wiki "/var/hda/web-apps/keepass/server/" should be corrected as:

/var/hda/web-apps/keepass/html

- The startup.sh script, and as well as all of the *.sh scripts in "/var/hda/web-apps/keepass/html/jakarta-tomcat-5.5.7" do not have executable permissions by default. The install script could do that on behalf of users, but I guess a comment in the wiki will also do the job.

- Maybe include a note that users can safely ignore "invalid security certificate" warnings issued by browsers (?)

Other than that, all looks great

Update: usernames/passwords given in the wiki did not work for me, any ideas? (Both for users "admin" and "user")

[bigfoot65]

Good catch! Thanks for the feedback. We will be tweaking this one a bit to make it work correctly. Sorry for any inconvenience as this one obviously slipped through the cracks.

The wiki page has been updated. The install script will be updated to reflect required changes as well. Once these issues have been fixed, I will post here so you and others can try it again.

[lou1z]

- Maybe include a note that users can safely ignore "invalid security certificate" warnings issued by browsers (?)

ummmm...... only if they are sure their network is secure! it's one of the easiest hacks in the book. poison the arp, become the man in the middle and you then have access to secure web traffic eg bank details etc.

i'd certainly put a disclaimer below it if you are going to add "ignore invalid certificates"

[twegner]

Good catch! Thanks for the feedback.

Another thing that doesn't work is the import of Keepass XML files. This is fairly important for those already using Keepass. I turned on execute permission of all *.sh files but that didn't help.

Thanks for your effort. I'll monitor this and wait until I see that you'd like folks to try again.

[bigfoot65]

Thanks for the feedback. I just noticed that feature is not working. We don't know if it is app or permissions related. We will investigate the problem and see if we can resolve it.

[bigfoot65]

I think I resolved the issue with import the Keepass xml file. When you do an import, it needs a file name with only one period or a specific file name. For example, I exported by file and named it kdb.xlm. I did the import with no errors and all passwords were there.

Recommend you try this and report back if you are successful. I did find some info in the Web Keepass forums indicating the file name should be kdb.xlm for import. If you are successful, we can add this to the wiki.

[twegner]

I had no luck naming the import file kdb.xlm (or kbd.xml). I have turned on execute permision for all the *.sh files.

[bigfoot65]

The permissions on the .sh files should not make a difference. I did read in the Keepass forums that if you use a Professional version, the import may not work.

Might consider checking their forum and see if there is a work around for your issue.

[twegner]

I did read in the Keepass forums that if you use a Professional version, the import may not work.

Thanks. In Keepass 2.x I exported to a keepass 1,x file, then installed keepass 1.x, loaded the file, and exported to xml. After this I was able to import into Webkeepass.

That said, as an experienced keepass user, I have doubts about webkeepass. The program appears to be completely undocumented (unless I missed where the documentation is), and doesn't seem to work anything like the original keepass. I'm sure I am missing something, but the only way I can see passwords is to edit entries. I applaud the Amahi team for making webkeepass available, but for myself, I'm not comfortable using it. I'd rather keep the *.kbd or *.kbx file on my Amahi box, and use the truly excellent keepass program itself on local machines.

I'd be curious to know if other users find webkeepass useable.

[ppmt]

Just thought I would add my comments

I just installed Keepass on my guruplug. I found that the *.sh files are indeed not set to executable and I set them

But then I end up with an error related to java

The JAVA_HOME environment variable is not defined correctly
This environment variable is needed to run this program
NB: JAVA_HOME should point to a JDK not a JRE

I guess I don't have Java on my plug

I will need to fix that because I really need Keepass !