Re: smtpmail authentication again

[Ted Zlatanov <tzz@lifelogs.com>]

On Sat, 07 Jan 2012 15:45:54 +0100 Richard Riley <rileyrg@gmail.com> wrote: 

RR> Ted Zlatanov <tzz@lifelogs.com> writes:
>> On Sat, 07 Jan 2012 06:33:11 +0100 Richard Riley <rileyrg@gmail.com> wrote: 
>> 
RR> So long as the passwords are encrypted in the authinfo.gpg....
>> 
>> .gpg files are always encrypted if EPA/EPG is enabled, so yes.
>> 
>> You can also encrypt individual passwords in an otherwise unencrypted
>> netrc/authinfo file with `auth-source-netrc-use-gpg-tokens'.  But they
>> are not usable with other tools then.

RR> ,----
RR> | Documentation:
RR> | Set this to tell auth-source when to create GPG password
RR> | tokens in netrc files.  It's either an alist or `never'.
RR> | Note that if EPA/EPG is not available, this should NOT be used.
RR> `----

RR> I dont understand the docstring. How does auth-source create passwords?

`auth-source-search' can, in some cases, create a whole entry, including
a password.  If this is created in an unencrypted file, you can choose
to encrypt just the password.  Also there's a "plstore" auth-source
backend (in addition to the "netrc" default backend) which stores
passwords and other secrets safely in an otherwise unencrypted file.

RR> While on the subject, whats the best elisp example/snippet to get a
RR> password from the authinfo based on only machine name or machine name
RR> and user id so I can use this in other elisp apps (e.g use authinfo to
RR> get my irc password from .authinfo.gpg).

Which IRC client?  I had a ERC patch a while ago but Deniz Dogan (the
maintainer then IIRC) didn't have the time to work on it.  In any case,
I'd rather submit a patch to the IRC client so you don't have to do this
yourself.

To answer your question about how to search, and assuming you don't want
to auto-create entries:

(let* ((auth-info (car
                   (auth-source-search
                    :host "yourhost.com"
                    :user "yourusername"
                    :max 1
                    :require '(:user :secret)
                    :create nil)))
       (user (plist-get auth-info :user))
       (password (plist-get auth-info :secret)))
  (when (functionp password)
    (setq password (funcall password)))
  (list user password auth-info))

If this returns nil, you can repeat the search without the :user query,
so you'll get any "yourhost.com" entries.

Ted