bugGNU Wget - Bugs: bug #53021, Ability to provide password...

 
 

bug #53021: Ability to provide password per-instance

Submitted by:  Noël Köthe <nok>
Submitted on:  Tue 30 Jan 2018 06:28:37 PM UTC  
 
Category: Feature RequestSeverity: 3 - Normal
Priority: 5 - NormalStatus: None
Privacy: PublicAssigned to: None
Originator Name: Open/Closed: Open
Release: NoneOperating System: GNU/Linux
Reproducibility: NoneFixed Release: None
Planned Release: NoneRegression: None
Work Required: NonePatch Included: None

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Wed 31 Jan 2018 09:03:24 AM UTC, comment #1:

Having an option for a different .netrc file is a good request and I wonder why nobody ever asked for it before.

We already have it in wget2 (--netrc-file=<file>). Latest sources from git at https://git.savannah.gnu.org/git/wget/wget2.git, collaboration at https://gitlab.com/gnuwget/wget2.

And that's where we add new features. Wget 1.x is still maintained - that mean we fix bugs and accept contributions. But that's it.

Tim Ruehsen <rockdaboot>
Project Administrator
Tue 30 Jan 2018 06:28:37 PM UTC, original submission:

Hello,

a feature request from a Debian user:
https://bugs.debian.org/887384

As far as I can tell, Wget only provides the following methods to
provide a HTTP password:

1. as part of the URL
2. with --http-password / --password
3. using ~/.netrc
4. using --use-askpass
5. using --ask-password

The problem is that 1 & 2 expose the password in the process table, while ~/.netrc is a centralised resource that may not be editable by a script. 4 & 5 are interactive, and while I could provide an ad-hoc askpass script, this is a gross hack.

It'd be awesome if Wget could provide one or more of the following methods to provide the password:

1. read it from $WGET_PASSWORD
2. read it from a specific file
3. read it from a netrc-style file that is not ~/.netrc
4. let --use-askpass specify parameters to the script/binary to invoke

Ftr, my current hack involves creating an executable temporary file with content like this:

#!/bin/sh
echo username:password

and then invoking wget like so:

wget -c --use-askpass=tempfile …

and that works, but it's a hack that I think could be rendered
obsolete by Wget functionality. Lftp and cURL both provide ways to either read from the environment, or to override the netrc filename.
Lftp furthermore can be scripted itself, which solves the problem
in its own way.

Thank you.

Noël Köthe <nok>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by rockdaboot (Posted a comment)
  • -unavailable- added by nok (Submitted the item)
  • -unavailable- added by nok
  •  

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follows 1 latest change.

    Date Changed By Updated Field Previous Value => Replaced By
    Tue 30 Jan 2018 06:28:37 PM UTCnokCarbon-Copy-=>Added -unavailable-

    Back to the top


    Powered by Savane 3.1-cleanup1