Passwords on OS X via security

Lucien Pullen drurowin at gmail.com
Wed Nov 12 19:06:51 UTC 2014


Also sprach Paul W. Rankin on 2014-11-12:
> I'd love to use an "elegant one-liner" (i.e. no pythonfile) to retrive
> my account password, which is stored in a local OS X keychain.

With using a .py, you'd call "import keyring", then "remotepasseval =
keyring.get_password(item-name, account)" in your offlineimaprc.  You
might try an anonymous function that performs the import, then
get_password().  But I don't know Python, so that may or may not work.

> [Repository Remote]
> type = IMAP
> remotehost = mail.example.com
> remoteuser = user at example.com
> remotepasseval = `security find-generic-password -a user at example.com -s mail.example.com -w`
> [snip]

Are you calling this while you are the active user (the one logged in
via LoginWindow)? If you aren't the active user (SSH, `su`, etc.), you
need to first unlock the keychain using the `unlock-keychain'
subcommand.  There's also a way to add offlineimap as the owner of a
keychain item, which, if I recall correctly, doesn't require you to
unlock it. (If you create the item from offlineimap, that counts.)



More information about the OfflineIMAP-project mailing list