Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 488848 - [arch-tools] Please store the bugzilla password for batch-stabilize
Summary: [arch-tools] Please store the bugzilla password for batch-stabilize
Status: RESOLVED WONTFIX
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Agostino Sarubbo
URL:
Whiteboard:
Keywords: NeedPatch
Depends on:
Blocks:
 
Reported: 2013-10-21 08:07 UTC by Agostino Sarubbo
Modified: 2019-04-29 14:08 UTC (History)
4 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Agostino Sarubbo gentoo-dev 2013-10-21 08:07:03 UTC
Since the last bugzilla update, the old batch-stabilize does not work anymore ( bug #488688 ).

So, please make the new batch stabilize store the passwd. Afaik William sent you a patch.
Comment 1 William Hubbs gentoo-dev 2013-10-21 16:05:03 UTC
I just told ago that I have been working with you on this and sending
patches to convert you over to the new Bugzilla API.
I haven't sent a patch for this particular feature.
Comment 2 William Hubbs gentoo-dev 2013-10-27 21:01:26 UTC
I am working on a patch to do this using cookies in a way similar to how
pybugz operates. I will be attaching a patch to this bug.
Comment 3 William Hubbs gentoo-dev 2015-01-03 07:05:56 UTC
(In reply to William Hubbs from comment #2)
> I am working on a patch to do this using cookies in a way similar to how
> pybugz operates. I will be attaching a patch to this bug.

Pybugz and bugzilla no longer use cookies. They were dropped by bugzilla because they had security issues, so this can't be done with cookies any longer.

(In reply to Agostino Sarubbo from bug #532054#C26)
> Atm I use batch-stabilize only for the interaction with cvs. Since the
> interaction with the bugzilla is half broken ( bug 488848 ) I removed this
> part and I use my own version in bash. So I have a wrapper called stabilize,
> which calls first the batch-stabilize and then the script which writes on
> the bugzilla.
> In this manner I avoid to put everytime my passwd.

I haven't seen your wrapper, so I don't know what you are doing, but you can't avoid entering your username and password. Since you are modifying a bug, you must log into Bugzilla.

> I hope we can improve batch-stabilize in the future to have a single tool
> that does everything.

What do you mean by "everything"?
Comment 4 Agostino Sarubbo gentoo-dev 2015-01-03 11:04:21 UTC
(In reply to William Hubbs from comment #3)
> I haven't seen your wrapper, so I don't know what you are doing, but you
> can't avoid entering your username and password. Since you are modifying a
> bug, you must log into Bugzilla.
I need to insert the password once. Then I have a .bugz_cookie. Atm I don't need to insert the passwd everytime.

> 
> > I hope we can improve batch-stabilize in the future to have a single tool
> > that does everything.
> 
> What do you mean by "everything"?

Everything I mean write on cvs and on the bugzilla.
Comment 5 William Hubbs gentoo-dev 2015-01-03 20:44:21 UTC
(In reply to Agostino Sarubbo from comment #4)
> (In reply to William Hubbs from comment #3)
> > I haven't seen your wrapper, so I don't know what you are doing, but you
> > can't avoid entering your username and password. Since you are modifying a
> > bug, you must log into Bugzilla.
> I need to insert the password once. Then I have a .bugz_cookie. Atm I don't
> need to insert the passwd everytime.

arch-tools and pybugz now share no code at all, and all of the arch-tools require a username and password whenever you run them.

What I would have to do if you don't want to enter a username/password is figure out a way to let you save the token to a file so you can reuse it, but I would rather not share the same file as pybugz.

> > 
> > > I hope we can improve batch-stabilize in the future to have a single tool
> > > that does everything.
> > 
> > What do you mean by "everything"?
> 
> Everything I mean write on cvs and on the bugzilla.

Batch-stabilize already does this once you sign in doesn't it?
Comment 6 Agostino Sarubbo gentoo-dev 2015-01-03 20:54:36 UTC
(In reply to William Hubbs from comment #5)
> arch-tools and pybugz now share no code at all, and all of the arch-tools
> require a username and password whenever you run them.
Well, since I'm using batch-stabilize to write in cvs, and pure pybugz via bash script to write on the bugzilla, since I did bugz login, I'm not entering a passwd since months...

> Batch-stabilize already does this once you sign in doesn't it?

Yes, but it is a pita insert user/pass for every stabilization.
Comment 7 Pacho Ramos gentoo-dev 2015-04-18 15:28:48 UTC
(In reply to William Hubbs from comment #5)
[...]
> Batch-stabilize already does this once you sign in doesn't it?

@Williamh, batch-stabilize still requests for password each time we invoke it :/
Comment 8 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2018-12-18 09:54:10 UTC
(reassigning to the first person on the ACL, CC-ing everybody else)
Comment 9 Agostino Sarubbo gentoo-dev 2019-04-29 14:08:45 UTC
arch_tools is a project started by phajdan.jr which atm is a retired developer.
I made an ebuild that is is my overlay but atm I have nothing to do with this project because I'm not using those scripts to commit.
I asked mgorny to grant permission for all developers. If someone want to improve the project, it is on our git repo: https://gitweb.gentoo.org/proj/arch-tools.git/
For now, I'm closing it as WONTFIX