Re: smtpmail authentication again

[Richard Riley <rileyrg@gmail.com>]

Ted Zlatanov <tzz@lifelogs.com> writes:

> On Sat, 07 Jan 2012 15:45:54 +0100 Richard Riley <rileyrg@gmail.com> wrote: 
>
> RR> Ted Zlatanov <tzz@lifelogs.com> writes:
>>> On Sat, 07 Jan 2012 06:33:11 +0100 Richard Riley <rileyrg@gmail.com> wrote: 
>>> 
> RR> So long as the passwords are encrypted in the authinfo.gpg....
>>> 
>>> .gpg files are always encrypted if EPA/EPG is enabled, so yes.
>>> 
>>> You can also encrypt individual passwords in an otherwise unencrypted
>>> netrc/authinfo file with `auth-source-netrc-use-gpg-tokens'.  But they
>>> are not usable with other tools then.
>
> RR> ,----
> RR> | Documentation:
> RR> | Set this to tell auth-source when to create GPG password
> RR> | tokens in netrc files.  It's either an alist or `never'.
> RR> | Note that if EPA/EPG is not available, this should NOT be used.
> RR> `----
>
> RR> I dont understand the docstring. How does auth-source create passwords?
>
> `auth-source-search' can, in some cases, create a whole entry, including
> a password.  If this is created in an unencrypted file, you can choose
> to encrypt just the password.  Also there's a "plstore" auth-source
> backend (in addition to the "netrc" default backend) which stores
> passwords and other secrets safely in an otherwise unencrypted file.
>
> RR> While on the subject, whats the best elisp example/snippet to get a
> RR> password from the authinfo based on only machine name or machine name
> RR> and user id so I can use this in other elisp apps (e.g use authinfo to
> RR> get my irc password from .authinfo.gpg).
>
> Which IRC client?  I had a ERC patch a while ago but Deniz Dogan (the
> maintainer then IIRC) didn't have the time to work on it.  In any case,
> I'd rather submit a patch to the IRC client so you don't have to do this
> yourself.
>
> To answer your question about how to search, and assuming you don't want
> to auto-create entries:
>
> (let* ((auth-info (car
>                    (auth-source-search
>                     :host "yourhost.com"
>                     :user "yourusername"
>                     :max 1
>                     :require '(:user :secret)
>                     :create nil)))
>        (user (plist-get auth-info :user))
>        (password (plist-get auth-info :secret)))
>   (when (functionp password)
>     (setq password (funcall password)))
>   (list user password auth-info))
>
> If this returns nil, you can repeat the search without the :user query,
> so you'll get any "yourhost.com" entries.

Thanks ted. I'll try to use this then to store my erc credentials in gpg
file. Strikes me as the srt of thing that would greatly benefit from
little wrappers for the commone usage as simple as

getUserForHost("host");
getPassForHost("host");

regards

r.