auth-source-search regex/fuzzy/partial match

auth-source-search regex/fuzzy/partial match

[Pierre Penninckx]

Hello,

I was wondering if some work was done already to allow for
`auth-source-search' to return entries that partially match the given
spec. I didn't find anything on this subject after a some research.

For example, say `(auth-source-search :host "test" :max 10)' finds one match.
I'd like `:host "tes"' or `:host "est"' to find that match too.

If a backend provides something like this, it's by using some custom
code circumventing `auth-source-search'.

I'm thinking the best way to add this would be to enhance the `spec'
argument from `auth-source-search' to take an additional `:regex'
property.

Or would adding a new function make more sense?

Best,
Pierre

Re: auth-source-search regex/fuzzy/partial match

[Ted Zlatanov]

On Fri, 21 Jun 2019 21:41:06 -0700 Pierre Penninckx <ibizapeanut@gmail.com> wrote: 

PP> I was wondering if some work was done already to allow for
PP> `auth-source-search' to return entries that partially match the given
PP> spec. I didn't find anything on this subject after a some research.

PP> For example, say `(auth-source-search :host "test" :max 10)' finds one match.
PP> I'd like `:host "tes"' or `:host "est"' to find that match too.

PP> If a backend provides something like this, it's by using some custom
PP> code circumventing `auth-source-search'.

PP> I'm thinking the best way to add this would be to enhance the `spec'
PP> argument from `auth-source-search' to take an additional `:regex'
PP> property.

PP> Or would adding a new function make more sense?

Hi Pierre. Sorry for the late reply.

We can certainly add this generally, but my concern is that it would
make queries less precise and thus a little more likely to leak
credentials unintentionally.

OTOH I can imagine some use cases for :host regex matching specifically:

* based on the domain name, ignoring the hostname
* based on a hostname pattern without the domain name
* against the whole FQDN

Would that be sufficient for your needs or would you propose other use cases?

Thank you
Ted

Re: auth-source-search regex/fuzzy/partial match

[Pierre Penninckx]

> On Fri, 21 Jun 2019 21:41:06 -0700 Pierre Penninckx <ibizapeanut@gmail.com> wrote:
>
> PP> I was wondering if some work was done already to allow for
> PP> `auth-source-search' to return entries that partially match the given
> PP> spec. I didn't find anything on this subject after a some research.
>
> PP> For example, say `(auth-source-search :host "test" :max 10)' finds one match.
> PP> I'd like `:host "tes"' or `:host "est"' to find that match too.
>
> PP> If a backend provides something like this, it's by using some custom
> PP> code circumventing `auth-source-search'.
>
> PP> I'm thinking the best way to add this would be to enhance the `spec'
> PP> argument from `auth-source-search' to take an additional `:regex'
> PP> property.
>
> PP> Or would adding a new function make more sense?
>
> Hi Pierre. Sorry for the late reply.
>
> We can certainly add this generally, but my concern is that it would
> make queries less precise and thus a little more likely to leak
> credentials unintentionally.
>
> OTOH I can imagine some use cases for :host regex matching specifically:
>
> * based on the domain name, ignoring the hostname
> * based on a hostname pattern without the domain name
> * against the whole FQDN
>
> Would that be sufficient for your needs or would you propose other use cases?
>
> Thank you
> Ted

Thanks Ted for answering.

It's been a while since I didn't need this - I don't even remember why I
needed this in the first place.

If I ever get the need again, I'll reply with a thorough email. :)

Have a great day,
Pierre