How to provide the password via keyring_jeepney and keyring?

[halloleo]

As suggested by @genotrance in #142 I have installed keyring_jeepney and keyring into the venv for px-proxy.

However I am at a loss in which config file I provide username and (maybe hashed) password. Neither keyring_jeepney and keyring seem to provide this option

Do I need to install something else? It is a headless RHEL system (just shell access, no KDE).

Sorry for this questions, but I can't find any info how to provide the credentials.

[genotrance]

You can specify the username in px.ini or on the CLI with --username=domain\username.

The password needs to be setup with keyring - it can be done with: python -m keyring set Px domain\\username. It will prompt you for the password.

You can then verify that it works with: python -m keyring get Px domain\\username and it will show you the stored password.

[halloleo]

Thanks for this, @genotrance!

I tried it, but despite the fact that I have installed keyring_jeepney I get:

Error initializing plugin EntryPoint(name='jeepney', value='keyring_jeepney', group='keyring.backends').
Traceback (most recent call last):
  File "/home/hl/venvs/px-proxy/lib64/python3.9/site-packages/keyring/backend.py", line 199, in _load_plugins
    init_func = ep.load()
  File "/home/hl/venvs/px-proxy/lib64/python3.9/site-packages/importlib_metadata/__init__.py", line 203, in load
    module = import_module(match.group('module'))
  File "/usr/lib64/python3.9/importlib/__init__.py", line 127, in import_module
    return _bootstrap._gcd_import(name[level:], package, level)
  File "<frozen importlib._bootstrap>", line 1030, in _gcd_import
  File "<frozen importlib._bootstrap>", line 1007, in _find_and_load
  File "<frozen importlib._bootstrap>", line 986, in _find_and_load_unlocked
  File "<frozen importlib._bootstrap>", line 680, in _load_unlocked
  File "<frozen importlib._bootstrap_external>", line 790, in exec_module
  File "<frozen importlib._bootstrap>", line 228, in _call_with_frames_removed
  File "/home/hl/venvs/px-proxy/lib64/python3.9/site-packages/keyring_jeepney.py", line 11, in <module>
    from jeepney.integrate.blocking import connect_and_authenticate, Proxy
ModuleNotFoundError: No module named 'jeepney.integrate'
Traceback (most recent call last):
  File "/usr/lib64/python3.9/runpy.py", line 197, in _run_module_as_main
    return _run_code(code, main_globals, None,
  File "/usr/lib64/python3.9/runpy.py", line 87, in _run_code
    exec(code, run_globals)
  File "/home/hl/venvs/px-proxy/lib64/python3.9/site-packages/keyring/__main__.py", line 4, in <module>
    cli.main()
  File "/home/hl/venvs/px-proxy/lib64/python3.9/site-packages/keyring/cli.py", line 132, in main    return cli.run(argv)
  File "/home/hl/venvs/px-proxy/lib64/python3.9/site-packages/keyring/cli.py", line 68, in run
    return method()
  File "/home/hl/venvs/px-proxy/lib64/python3.9/site-packages/keyring/cli.py", line 85, in do_set
    set_password(self.service, self.username, password)
  File "/home/hl/venvs/px-proxy/lib64/python3.9/site-packages/keyring/core.py", line 60, in set_password
    get_keyring().set_password(service_name, username, password)
  File "/home/hl/venvs/px-proxy/lib64/python3.9/site-packages/keyring/backends/fail.py", line 25, in get_password
    raise NoKeyringError(msg)
keyring.errors.NoKeyringError: No recommended backend was available. Install a recommended 3rd party backend package; or, install the keyrings.alt package if you want to use the non-recommended backends. See https://pypi.org/project/keyring for details.

Any idea why?

[genotrance]

I'd suggest pip install jeepney cryptography - seems like they are not already present.

What version of RHEL are you using? I can try an equivalent CentOS in docker or something to reproduce.

Meanwhile, I am looking for an alternative for keyring since it seems tedious to get working. Any suggestions are welcome.

[halloleo]

I am on RHEL 8. Will try the installs.

[halloleo]

Ok, @genotrance. I installed jeepney and cryptography into the px-proxy venv. Plus I checked that they are listed via pip list.

But I get the same error. Looks like jeepney.integrate is not part of jeepney...

[genotrance]

Looks like the jeepney package removed the integrate module since it has been deprecated for a while. However, keyring_jeepney hasn't updated yet. Should probably open an issue with keyring_jeepney.

You can try removing jeepney and then pip install jeepney==0.7.1 and retry.

[halloleo]

Thanks for your suggestion, @genotrance.

I uninstaleld jeepney 0.8.0 and installed i9nstead 0.7.1, but I still don't get a keyring backend:

/home/hl/venvs/px-proxy/lib64/python3.9/site-packages/keyring_jeepney.py:11: UserWarning: jeepney.integrate.blocking is deprecated: please use jeepney.io.blocking instead.
  from jeepney.integrate.blocking import connect_and_authenticate, Proxy
Traceback (most recent call last):
  File "/usr/lib64/python3.9/runpy.py", line 197, in _run_module_as_main
    return _run_code(code, main_globals, None,
  File "/usr/lib64/python3.9/runpy.py", line 87, in _run_code
    exec(code, run_globals)
  File "/home/hl/venvs/px-proxy/lib64/python3.9/site-packages/keyring/__main__.py", line 4, in <module>
    cli.main()
  File "/home/hl/venvs/px-proxy/lib64/python3.9/site-packages/keyring/cli.py", line 132, in main
    return cli.run(argv)
  File "/home/hl/venvs/px-proxy/lib64/python3.9/site-packages/keyring/cli.py", line 68, in run    return method()
  File "/home/hl/venvs/px-proxy/lib64/python3.9/site-packages/keyring/cli.py", line 85, in do_set
    set_password(self.service, self.username, password)
  File "/home/hl/venvs/px-proxy/lib64/python3.9/site-packages/keyring/core.py", line 60, in set_password
    get_keyring().set_password(service_name, username, password)
  File "/home/hl/venvs/px-proxy/lib64/python3.9/site-packages/keyring/backends/fail.py", line 25, in get_password
    raise NoKeyringError(msg)
keyring.errors.NoKeyringError: No recommended backend was available. Install a recommended 3rd party backend package; or, install the keyrings.alt package if you want to use the non-recommended backends. See https://pypi.org/project/keyring for details.

PS: Running the command while ignoring userWarnings (python -W ignore -m keyring set Px domain\\user) doesn't better it.

[genotrance]

Have you read the section in the keyring documentation on how to get it working on headless systems?

https://github.com/jaraco/keyring#using-keyring-on-headless-linux-systems

You need to run the dbus and gnome keyring commands to get the backend running.

[halloleo]

Thanks, will look into that when I got ten whole thing working. For now password retrieval with python -m keyring get Px ... works via keyrings.alt.

[halloleo]

I did get the password storage working using the keyrings.alt package. Not ideal, but for testing OK.

[halloleo]

Thanks for all your help! 🙏

[genotrance]

Getting keyring working on headless systems has been a pain. I have it working on Alpine and Ubuntu docker containers. The Dockcross container which is based on an older CentOS required keyring_jeepney. I’ve had no luck on pure CentOS or Rocky Linux though so far.

Overall, I’ll have to provide some alternative for folks who aren’t paranoid about security and don’t want to deal with keyring. Maybe the alt package is the way to go instead of mom and pop’ing it.