[Yum] Re: Usernames, Passwords and yum

[Michael Stenner]

On Mon, May 31, 2004 at 05:59:32PM -0400, Tom Diehl wrote:
> On Mon, 31 May 2004, Nathanael Noblet wrote:
> > On Monday, May 31, 2004, at 01:57 PM, Tom Diehl wrote:
> > > I am trying to get yum to use an ftp based repository that is not 
> > > publicly
> > > accessible. As a result I need to pass a username and passwd to the ftp
> > > server. Does anyone know how to get yum to do this? There does not 
> > > seem to be
> > > anything in the docs about this.
> > 
> > This is a guess & assumption, yum uses a 3rd party software package to 
> > talk http/ftp I would guess you can do
> > ftp://username:password@site/path

I'm not sure if I'd call it "3rd party" :)  Basically, urlgrabber
(which came into existence as part of yum) is a layer over urllib2.
urllib2 is one of the standard python modules.

> Yes, it turns out that works. I originally thought it did not but I tried it
> again and once I corrected a typo it worked. Now the only problem is how to
> hide the passwd. I realize one could just sniff the passwd anyway but is there
> a way to not give it away by simply running yum? When the failover mechanism
> kicks in it prints the username and passwd. :-(

Oooh... That's a really interesting point.  I hadn't thought of that.
That might be worth pondering.  Perhaps the urls should be "scrubbed"
before they're printed:   ftp://****:****@site/path

The question is where to do that.  I'll think about it a bit.

					-Michael
-- 
  Michael D. Stenner                            mstenner at ece.arizona.edu
  ECE Department, the University of Arizona                 520-626-1619
  1230 E. Speedway Blvd., Tucson, AZ 85721-0104                 ECE 524G