GNU bug report logs - #50953
auth-source-pass should not be limited to a local directory

Previous Next

To reply to this bug, email your comments to 50953 AT debbugs.gnu.org.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Lorenzo Martinico <lorenzo <at> martinico.me>
To: bug-gnu-emacs <at> gnu.org
Subject: auth-source-pass should not be limited to a local directory
Date: Fri, 01 Oct 2021 23:06:31 +0100

Apologies if this is not the appropriate mailing list for this message.
I would like to put in a bug report / feature request for
auth-source-pass to stop using the local file directory and just rely on
the output of the pass command (or provide an option to do that
instead).

For context, I would like to be able to use the pass command (or rather,
 an alias) to fetch files from a different host on every request, but
 not store the gpg files on my local machine. This workflow is currently
 not supported by auth-source-pass, as I need to specify a local
 directory from where to read a list of .gpg files. The behaviour I'd
 like to see is that the current parsing of the directory and .gpg files
 should be replaced with calling some equivalent functions from a pass
 binary, and parse the results. This is currently supported by the
 contrib password-store package, where the family of password-store--run
 functions does return the output from the pass command directly.
 However, that package is not suitable for building a complete solution,
 as many functions are not implemented or relay on auth-source-pass.

 I consider the above a high-impact bug, as smtpmail authentication
 requires auth-source, making email password storage quite restrictive.
 However, if there are some good reason for why the current behaviour
 should be kept, I would be happy to just hear any suggestion on how to
 adjust this through configuration, as I understand my usage for pass might
 not be very common.

Cheers,
Lorenzo Martinico

Message #8 received at 50953 <at> debbugs.gnu.org (full text, mbox):

From: Lars Ingebrigtsen <larsi <at> gnus.org>
To: Lorenzo Martinico <lorenzo <at> martinico.me>
Cc: 50953 <at> debbugs.gnu.org
Subject: Re: bug#50953: auth-source-pass should not be limited to a local
 directory
Date: Sat, 02 Oct 2021 11:10:18 +0200

Lorenzo Martinico <lorenzo <at> martinico.me> writes:

> Apologies if this is not the appropriate mailing list for this message.
> I would like to put in a bug report / feature request for
> auth-source-pass to stop using the local file directory and just rely on
> the output of the pass command (or provide an option to do that
> instead).

What's the "pass" command?

larsi <at> elva:~/src/emacs/trunk$ type pass
bash: type: pass: not found

> For context, I would like to be able to use the pass command (or rather,
>  an alias) to fetch files from a different host on every request, but
>  not store the gpg files on my local machine.

Can't you just set the gpg file location to "/ssh:other-host:.authinfo.gpg"?

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no

Message #13 received at 50953 <at> debbugs.gnu.org (full text, mbox):

From: Lorenzo Martinico <lorenzo <at> martinico.me>
To: Lars Ingebrigtsen <larsi <at> gnus.org>
Cc: 50953 <at> debbugs.gnu.org
Subject: Re: bug#50953: auth-source-pass should not be limited to a local
 directory
Date: Mon, 04 Oct 2021 21:53:24 +0100

The pass command is the command to invoke password-store, "the 
UNIX
password manager" (passwordstore.org), which is what 
auth-source-pass
purports to use.
On my system, this is an alias for a process that fetches
passwords from another host in a compatible way to password store. 
The
vault host is not accessible through ssh, so I
can't just change the gpg file location as suggested.


Lars Ingebrigtsen <larsi <at> gnus.org> writes:

> Lorenzo Martinico <lorenzo <at> martinico.me> writes:
>
>> Apologies if this is not the appropriate mailing list for this 
>> message.
>> I would like to put in a bug report / feature request for
>> auth-source-pass to stop using the local file directory and 
>> just rely on
>> the output of the pass command (or provide an option to do that
>> instead).
>
> What's the "pass" command?
>
> larsi <at> elva:~/src/emacs/trunk$ type pass
> bash: type: pass: not found
>
>> For context, I would like to be able to use the pass command 
>> (or rather,
>>  an alias) to fetch files from a different host on every 
>>  request, but
>>  not store the gpg files on my local machine.
>
> Can't you just set the gpg file location to 
> "/ssh:other-host:.authinfo.gpg"?

Message #16 received at 50953 <at> debbugs.gnu.org (full text, mbox):

From: Lars Ingebrigtsen <larsi <at> gnus.org>
To: Lorenzo Martinico <lorenzo <at> martinico.me>
Cc: 50953 <at> debbugs.gnu.org
Subject: Re: bug#50953: auth-source-pass should not be limited to a local
 directory
Date: Tue, 05 Oct 2021 09:08:10 +0200

Lorenzo Martinico <lorenzo <at> martinico.me> writes:

> The pass command is the command to invoke password-store, "the UNIX
> password manager" (passwordstore.org), which is what auth-source-pass
> purports to use.

Is does?  Where does it purport to do that?  As far as I can tell, it
says that it support the Secrets API and ~/.authinfo files, but perhaps
I'm looking at the wrong place.

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no

Message #19 received at 50953 <at> debbugs.gnu.org (full text, mbox):

From: Lorenzo Martinico <lorenzo <at> martinico.me>
To: Lars Ingebrigtsen <larsi <at> gnus.org>
Cc: 50953 <at> debbugs.gnu.org
Subject: Re: bug#50953: auth-source-pass should not be limited to a local
 directory
Date: Tue, 05 Oct 2021 09:01:44 +0100

lisp/auth-source-pass.el "Integrate auth-source with 
password-store"?
As far as I can tell this used to be a third-party project which 
has now
been merged into Emacs.

Lars Ingebrigtsen <larsi <at> gnus.org> writes:

> Lorenzo Martinico <lorenzo <at> martinico.me> writes:
>
>> The pass command is the command to invoke password-store, "the 
>> UNIX
>> password manager" (passwordstore.org), which is what 
>> auth-source-pass
>> purports to use.
>
> Is does?  Where does it purport to do that?  As far as I can 
> tell, it
> says that it support the Secrets API and ~/.authinfo files, but 
> perhaps
> I'm looking at the wrong place.

Message #22 received at 50953 <at> debbugs.gnu.org (full text, mbox):

From: Lars Ingebrigtsen <larsi <at> gnus.org>
To: Lorenzo Martinico <lorenzo <at> martinico.me>
Cc: 50953 <at> debbugs.gnu.org
Subject: Re: bug#50953: auth-source-pass should not be limited to a local
 directory
Date: Tue, 05 Oct 2021 10:07:19 +0200

Lorenzo Martinico <lorenzo <at> martinico.me> writes:

> lisp/auth-source-pass.el "Integrate auth-source with password-store"?
> As far as I can tell this used to be a third-party project which has
> now
> been merged into Emacs.

Oh!  auth-source-pass!  Sorry, I wasn't aware that there was such a
thing -- I assumed it was a misspelling of "auth-source".

Sorry for the noise.

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.