GNU bug report logs - #81976
[PATCH] Reactivate auth backend macos-keychain-generic

Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.

Package: emacs; Reported by: Rudolf Schlatte <rudi@HIDDEN>; Keywords: patch; dated Fri, 2 Oct 2026 15:05:09 UTC; Maintainer for emacs is bug-gnu-emacs@HIDDEN.

Message received at 81976 <at> debbugs.gnu.org:


Received: (at 81976) by debbugs.gnu.org; 7 Oct 2026 11:27:28 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Wed Oct 07 07:27:27 2026
Received: from localhost ([127.0.0.1]:53190 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1xEPnw-0000le-4U
	for submit <at> debbugs.gnu.org; Wed, 07 Oct 2026 07:27:27 -0400
Received: from mout.gmx.net ([212.227.15.19]:36275)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.84_2) (envelope-from <michael.albinus@HIDDEN>)
 id 1xEPnp-0000kq-13
 for 81976 <at> debbugs.gnu.org; Wed, 07 Oct 2026 07:27:20 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmx.de;
 s=s31663417; t=1791372427; x=1791977227; i=michael.albinus@HIDDEN;
 bh=ryDB6OeVnDJieMHxIR5SVvlbkxzNclvsUS+HhUdAAxY=;
 h=X-UI-Sender-Class:From:To:Cc:Subject:In-Reply-To:References:Date:
 Message-ID:MIME-Version:Content-Type:cc:content-transfer-encoding:
 content-type:date:from:message-id:mime-version:reply-to:subject:
 to;
 b=TOqWK5ukdfZg1NTrqYARLofEC6mIzC2IjV1PBP/8Hqm+KHTsOYCTy9baXxXD8C/x
 eDJvBHvKkNbEkfW6BU2OXaDWG1gaDYhranRwO1lX9Fzz0wspdxVsZKxjKkLJaZw8N
 pl6CnlgXIG0PHZg7+jcRA6NSiA1KOMdGsDvGzoSYNOILubvHwzTB0L3Tt8QSZo60x
 ANwu+atKlWe4bTONTcH5BuUm2Sh2pf/YYTvfs7e2JslD33vodSrIkOi5Ws59kZ/JZ
 P20hP0dS0SjFcai8adVaeZgnKId7Csxz3w7Yqd7DTFY2Jbks/XYSBNhqgo+aAG+SM
 0n2cUjtX3mRWm/BRtg==
X-UI-Sender-Class: 724b4f7f-cbec-4199-ad4e-598c01a50d3a
Received: from client.hidden.invalid by mail.gmx.net (mrgmx004
 [212.227.17.190]) with ESMTPSA (Nemesis) id 1MUGi9-1x5NXc2daV-00LhTS; Wed, 07
 Oct 2026 13:27:07 +0200
From: Michael Albinus <michael.albinus@HIDDEN>
To: Rudolf Schlatte <rudi@HIDDEN>
Subject: Re: bug#81976: [PATCH] Reactivate auth backend macos-keychain-generic
In-Reply-To: <m1o6d6q4pl.fsf@HIDDEN>
References: <m1mrsw16we.fsf@HIDDEN>
 <871pa7t2r9.fsf@HIDDEN> <m1a4otr3id.fsf@HIDDEN>
 <871pa57d9m.fsf@HIDDEN> <m1o6d6q4pl.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13)
Date: Wed, 07 Oct 2026 13:27:06 +0200
Message-ID: <87ld89da45.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain
X-Provags-ID: V03:K1:y6ASBBp5JZGjdC1I2c/8ElF5LdUdlB2YiJu/KApe1F2TC6z7aUB
 t/X2HWc0FoIjHIGZnpkCQacgmys4UDTQzivjjGK2nkLd2qRG9AkvB4PhLvs745qmL7DKU9k
 xU7Ry/IPVRww692n319c96gmxIT33RKPWgZA8fuYxYF0FqY5MSPVj+fxq8ntb1FLZqMNlZu
 zaQGGqvjVx6ahRvi0YNQA==
X-Spam-Flag: NO
UI-OutboundReport: notjunk:1;M01:P0:aQNVVFPXNuo=;X2rnV18k2m6w7exL20y2Nla+VfO
 dzzOBPEJdSKxMvay2tYXlQ9DdjevMvcUj3L7k+cJt5pLU19nufIkfUuAhOoUyeBOO3LXU9Q5S
 y2J8ZY9ve39SRjrLPDW3oDREK3amheC2adN02I/OrmLKP0yERVhtW+xI4ecyxTvFoW27pegV0
 oT8cM7FctXV21r8a7J52M6z6FPj+FUEJvUbPzwNzuJHUROkIHu3ju6csg/PZYSBmvhejXlcEB
 fuGzVnhZgAS5xvKtozIm1k51Vm+SlMCIzo6+8syC9XXSW9NXOhCfhP+g9sdyWYbh71RAaIv//
 RG9Ins9Y0YtyP/Aohr2TYIvqom660uTqaxfJqV5J/tNU615Eauob5Klkjl1TczYFCv+art98R
 T+4CmLe8ytEsZMRpjidtAx/oxqvHJHzV4swqqYxTZzd2x3rQwAW6XTvyuLqlziegDA/AbSmrs
 m9EM5gge6p6ebHIeLDQqkKbdwsoo6Tk7wlQaFO0KyH+/w0PMVxodUkvdbRcmgO1+CyWCy5F8p
 rgZhQE3FdIeuXy2w61FmwYWghuiVqRbbK8lIwHxVcMfOzq61PrQcsUOKbROePDgP/YEnOTemV
 NBezG5AdDialVxj2BGlhFJS7tQ4HdjFbSVltXCoUZUchAXwIyuC95vDq1Ug2UzD863ggXMnNv
 s5b4bIoorB5Jj5D4zEsBnSXJKgbp1PCxAPR9IgLCjOkCR18Xa0es4tyMEMuv98koIQnYs6HuZ
 xs7Bzl0tucdUgEv/Bs421TMUNq3hgQbOsae9NtotNbqSkpBdtdQjG2rgEyX9rBEr9n4Lms22T
 ijeAi4mGLy7Lgu0J95nrNa2/Vu0MwtF5RkA0uPuMBPvNUhWMb0Dm4MmcNOW/1AgMscZQXlS1X
 TgtBLVUwL1miIAdB0MdW/Y1IHtoBpEKlDKzN+oCHY3gOMEIWxlkd45ev487y2BjLrpyUFb28g
 0p0kEo/w3lALCDnN/mZpSVyj3D71AZu/MBpLbirvXQG19cuDxQK1cIXjWpOkt+UP3VXweii1A
 Q7XeMB1U7X5VPoXWJH92WCtUfeqS6/YvdqdahKXxDWqaHb4cPtJ0DChs6IbqE+bmTHnG1xE6x
 tZT8ObQWbXrtMhpeT41yvf8UEZovUd5dRpQriSbHtJ4ETsEXOGgukVqK3pe0SiiqUtD6WZ92A
 jtZqgvF1OVv8GZU/AHFIi1aU7WmKhC/WAp3NOFKE7E7eHssNfKCntjVc3zEEBG2yXizD0CFl0
 +Pu2wsc5vDnaikpLgPOWy4RRb6xFKRtSDTyq0xbbYjJ0qh/qrtQcB9dWJZsW7YLCHGX6avp56
 AdBkYtjlXDCNnK879EiUVacshMlg1RtsZxuwVHnivpcOHQXspglPCQIH9Yiux58U/t1FwCL+M
 404wtj5mc/+slct7veLsCIXtkR6a7ht6ujysD6o1Pzd1e5hraZ5YebB9sL2dsgSt5PbXZvtiQ
 VQO+UQHpBokrpHsYrWvxo3fuCCu3VcP0I9w5SgQ4e7hdBujl8FcAS+VKiMVNITRvKA6sHEYmj
 rpcu/joR113LWpzaYLuVhg1zsW9MGP1kYKuMkwiO7+IT+cn0nWNm6qS0yn9NOVXL+HqrypX7w
 TSmFGODNlJPiDYCZzJB12u30AtGhyU8G1Cv4hU4fdn3FMcCIDwsy6inbn+Ga5rsfDozcNtV6B
 KjlohmCvv4LsvSqDiDQMl+XjTGOHDuCzj6ztkSrZHDaYhMQXGzMRELciIbJPzocdXW5yQzpRp
 IO/I4bBf8Npi6xrbe41QV8C0nJhKrY9le2YhAilkQEtup2X6KDtrM2b/nJlnGlKSaYxF6+DBR
 xGaOU/AdmoFxhyJc2FmY7M15MwKaCws2vcHPgEV7+2cA/yjxaTiR1o0DhGcDLJ5xLvpzI+o4/
 Wu0SoughMUmRQTo1SGi9xJ8g3ljE3HLyUMAqz9CiiPM7EN3ux6L2Zikse9EbvwcFuJ+rG1cUs
 npdWpYflqpcgmfYOlHSI8rSOmtCNJdPT8ttycg0/PkE80mQQUAMvCmSQmPxQnlReNt+zCxNEH
 VTeGqVJXzD5bokl2XJ+S6j7MvMxDf+LoiHxR1pQa/LfwNhcdiFhn03/yewzoBOtMenDKl74ML
 IJKoWFJIGcOcIbU4QNuMoL0LwbpU41dl6WshTc1AASkhwBye4+PiYVV9zn31PHZqdehrKXSh5
 Kh8b9nXt+RTZWISEQTVUbKl7XQmOFBYE8DuYYlTNM/tZZxn6aodGinSPJOMfJvtrFovc5OYJO
 ne3ePfpyHv0ZJgR/AsL6HxSj6Cf50oYIghRw5zIFUtW0K7ART7vPhaLNosAiZ4qlWwaePM8ss
 ek674chuWZlJgOp2kAnu8EcmVhWmcDVLlYWux6J8F88TcTC8WvNMZTsw/H7minAm98VlGD/Ce
 tMSgQ7NwmjC1bp82zxMFMYBh9WtuCNpNAMgwu2SYMDZPNG2QGz9PNR/QIZPrCcatSSG32NUU8
 WpEuzfyoa1nP7S1WtZiHxa2zDvK2gdc4qy70cp2+/3w3wp+iloc2/PTHZj8lQsqYnhFDWWw0j
 J9SE2jQk8XNYu5k3OM7cYWuo2XsoAtZnZd95BUImNg4HSzV4H1RlxrVqRPQYOhw805aXZ5uow
 5cszK8tD4b4Tf04a201BF3JV1wJ8Bc4eh/RTKFs8TsLNw1njZvIN8/QnRUCPFZl//eGlrmdAP
 3ve1Z+QPGH9tIFI0qPq3lNfymk+CLAjMrx6c+QaMCHpfWyi8i7mO9b5BtSddTEGkEZu8FifDs
 DFQ8JImoCoJTzLo9Tb9n0kacfXBLNe1x5ObgtJL5gfrnzAuD7lBRmI9PHKrCaLt20VlAge85D
 9A+NgLhynAEhrQ/e+Z9RNQP5uB7Mzqooz4TNmjF9tiN0c8bvPLbDB9L3j0yn7wHR71jthX7Ow
 srO8jH84vMQ1IgsbuXG9BavHrt/rUHGMg0lKSqH/hRBddVceOfqTz7mHriE5OkhxPDsakUb3A
 fx86ipL1fbAidv0LgfsAOJqZMG1hTra/SCuECHSEFd6/szhafarKurwIw5uREoifq0uz5IvQt
 08QTFh3CRNFu3xsaZpxtAT7deEKvQEAQQHrR4OXRo/Fh8T2qkR7hWU1iFxiNc3kSyclxtqyID
 8QeV0y9A0RiUKGNNw647kG9Dk58qufADzpq9bKcWs+AWm1BEMN84sra0jqoQ665i9oPEXdTp8
 r1Jza7QjYaPtETdeffBACWKwo/CtOZHlRQsSqBAVnWZplBUi7LMFnzXyq4k2mLJ9yx1uHcMl2
 JqHnz5O53Q5cvyB/PRe+e/xYP+SFtsFkwfM8u4NWAUrLQeotV3IOx9xJflpfUwAlafecftTza
 //96m/H5AAYAwpcaycIGdMNtenjgzSVW4Ww9dDFoahk0V6qtBz7heKvxHIq11TVpkXTC1Vpof
 VSCAfWSf7rbJgBiwXJbkDYVUup8/GRCIWugPWbWgGJUQZw1m05NQZhrMXlelq79GtHFi7iTYv
 WFHrOolDYL0KfnTb+jaoIMlR4Vy46iMEi32EHUB4doMQPb7D/Q8sFZNNtNNIf3LHT36UHzGSz
 dnhEKzCIOeSKD0n/CsWOyjw6G96CC7evi3rtwpvX84yUgnm6JvnJMQyzKhpevhQ9RCNM5UGSt
 ldnKXDdHeLf6V768Fk39aM/ix4OBjekEv/4+1M01uIsTQaxJQj1X+22Smcf0fm1AWZz/AXspA
 xuy/kjFGy6J7xAzkejEQhlM7WAj92zughQHVhpX+Ipna0hlMU4bQePuFl4btQHq/k/vFJ7OoL
 GMY1AxcJYiyaGiRe3PtJpvVIjS4hp5FMyO5Lsk3oM1uvjOP2Jqrp5RzEawmc5IIDnvbSL/4Uo
 btnv6x6zeE9qxosHQ+n4z8C6KzgQxjg2CA+P1GtrIAGW2BIFQuVQaeOhfMNtB6YdrFI7vt5vv
 mFc+89GDZ7oOe5YKXAaW3L3u0rxPQmS0XoIM1nish0CnBUWN2UK6Hy1O0nSoQbRvVhMiRMjFH
 wDNdGuKmnGLOOg1E8QLcJIjJCQ/CTpVKP6SFWVF6GqAyGCeiLHeptQMr8KZclt/YcO7GGcyrW
 PtaCVeU+1Ixdkr360MXA4YIr/QzfLlGrpGyk9CvNICaULmCOH6l8DOmT0uOufc81Uv+WNqCwk
 sZkTY8Aos/VksN1dNFLYL60XMEsYBaYkoFqzxaLtpHa4T+XXpztB9iXVVjCwRt+214+XsOAW7
 tIKcDJcsB0MuLeEwsgCz4FsHQ5c/GxtrUNzOsnvTYEAF2p6FzBJGHXrotLXk0YVZmjKWuVvbk
 6K9UP+xIS86a7KNg0iWnaPfsusS6e8/7D9n1d3YrVw94FGmtuRXPmrpYQc8crj5mWX9DuKaax
 Kf4hDVucfnJDx1zlyejhqQ3GbHiLPTdyUN6uSVliY3CiZDqMJ4mVWj3BBxLHztbemxyaF5fyp
 NeNQis/B4n/TL+lYJc1SSTA8PfU5bzksnIVPNb+3YZEsoLBbenjuYskNA4nlLPA4/byzQi2OX
 Qu3tOw/eCfFjys9cdNF77d3zeBeskTaS+cnqHHNEhGiF9NMjKESsncB74t6xaokhvlFOTBTBq
 a09ZcdmEtfD8LEscLg4V8kjUvw5sJ1UOpqSHKP625TaPm4wqDcXKvjUasbC2uydieh016Wyxx
 Kn1OqINm0FsD1Z7S7GrJA7gOvhbxF8s5pPs6EYpAo97cWMVWMD7sh5ffaOMBNSY8w2zr61v/l
 886/ej/05q04qojEmEnwF7gK+YGqwu0FwucYQitOCC9wruiox2+4Dl30Cc+RNUO1qde8H1GqQ
 IBCDHtWHwRmsI0EvuunNnpB5h3qyBJIom/SqgoQ2NXRfDVm7JyG2+XcrVMgotN5qxOrg8ooGR
 f41QTOIVeyvytkd0JNmR9ygPWFmY9l7Zv6Q6rJaN9byq1EXkSHPLjgHCOE9a92x+qN62G8hL5
 FRnDzsS45IfhhLicozs6z2nAUAOnUm56ibT6nQBzsVmNrxKxoqF7Bv7b2DXHx7IdfT/M0ixRY
 EqhHw306ZEzZ2hmgiF+6XWizHyqUKrKrevTHQ98v1GwH4j4RZAdh8KchAEgQlosMMzJnrrePK
 GBRHmuCVu1rZ1MJ/3UwcZOc0j6D56xmclu1PV0+m4+0qBxl8URZyt/D6mbYZWToYonBh9uvRe
 ynvxuNE6tTydPrA5BuVK51JAaZqbgo43DqwqfhVD1Hu14Zjfg+bZon4mLdoREDJfRev68q2le
 coI/YJIrHzTy0bH5HpNo29kYJwuhHFG2ovK+GYqXR2lJQROrpoUCdrxZ4Egv1y/kpTl/ypt17
 2CsRIVihduCOcQ4+ziLoOHmtyY+3i+Kbx6wmLnclVVoPmTt5bvpFcu16cEd2nLHsCevOTVurB
 qd+KUa2yCBRX2GvkXeOXbfJofDweXxjxsexZI3otlO+UObMdjINXMr7BQkpL/PzApXZCe1+Kz
 nmfaVfi++iUVry3h9mwvZA/e2KJRPRccDQTvNrePknrioU9eJUsuOQI9IcvzpObgkOOqUK8Ni
 pHxWeZNlcUwDyiC+E6DmarZXmP7fYjZpw0huCuxhjqItcB/Xj3p03r/eGX9s2jIi8cFHt6olg
 iJNPrAgL7vBDY3QQ/Q9m3zH4fa/E2mElJh1D0GNZdLX5ZaiJACSJbaGrt98Wy597nzXWdDInV
 zcNVGkm42su6Vei027TmF4Uokm6G3V3IdaNw8DC9Gjdpqf4rKI0mwFglGBibwaTXaLRQl4EP4
 rrpcNgxsKANE9Emo7z+ejWbGbUjNWIkwdJiGjWaKlipIurMfS4PyNcc8S0GKx51cH5Hnve0TN
 fYKBsHbpqpRAlZZiwkeLuEB8ATKHH/gKKszv9PPkZJaobJTCBJtNwHtLSpZo6sr6Pg0Q2ppzX
 vZzcmmjjV1yEgCLCNqhbJKoyVsx7pekUrFd5s/iLEd9u4/onnzCA9QsaObv8jNqrrmrpNcTr9
 2uzyhsZZqrbyuBu+nm4t+81q2KIw8MPSPKsJfvJ49uN8EhHza+Ecarpp2+TzGS8en2HtDlbeN
 yMldOJQry5ccgqRd2SHzloxlyHJ+riCxa92vj6v79SP3ePNtc4GPY3fMbamB7cmurR/1epAbo
 VDOKy8Kn/Wzh12wthgMgLqgkb4cjjys2EEuiZIifLa34V8pfGv5e8uhG+l2aXawaWGtE4NWtX
 jLsGi0ULTpNdqSfaoJCNBOQFgRM9x60K1Wc0DMwZl7vyOgcD+okLA7Bb6v9OQVY3g19vY3gvv
 BLYrh7KIQxPW2YTgGl0Ho8q/TdWLZ4ijZblZDqDL4JpGNyh0ATtbKST+1gn/z87g5SJYISvrC
 drhLT8bvRGAqCtSFFGUqy1RJpcjPaOvEsY3rhbaaIXdDsHBroBxLLzClW8rxj+DNyNcwQiGLW
 gxYbwOt8uMhTPGERecj51EGx7LvU4wX2WBnDk1xS2RXb7qK4XzYDjTjSXU0k/e2utXzGhjhCY
 ohDdU+7o+IfvVQ6bDq3Vkr9mmppuCAtPg0TC6d8Ivz32/N9hw4HtjtCldSFywNNjX9Nj6o6s4
 isbceSWaG1sFN/FYOnvp4xS4EB5RkSzM7enIjCfLBEXx4bwg4Id/kpDNhS1yJlb8/FmOUeKpk
 jM5MYZOw==
X-Spam-Score: -0.7 (/)
X-Debbugs-Envelope-To: 81976
Cc: 81976 <at> debbugs.gnu.org, Ted Zlatanov <tzz@HIDDEN>
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

Rudolf Schlatte <rudi@HIDDEN> writes:

Hi Rudi,

> Here's a patch documenting the use of non-standard keychains.  I also
> straightened the nomenclature -- the macOS backend _uses_ keychains to
> store passwords, so not calling it "Keychains" (which Apple's
> documentation does not do either) makes for less awkward wording.
>
> Also a small code change that permits the user to add either string or
> symbol "macos-keychain-internet" (and "-generic)" to 'auth-sources',
> since strings are already used for non-default keychains.

LGTM, pushed to master.

> Note that this does not include your patch for handling ':label'
> (questions about that one in separate mail).

Yes, this is discussed with th other message. Hope my corrected patch
works for you.

We could keep this bug open for your implemntation of the :create
argument. Or do you like another bug report?

> Rudi

Best regards, Michael.




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#81976; Package emacs. Full text available.

Message received at 81976 <at> debbugs.gnu.org:


Received: (at 81976) by debbugs.gnu.org; 7 Oct 2026 11:01:58 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Wed Oct 07 07:01:58 2026
Received: from localhost ([127.0.0.1]:48787 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1xEPPI-0007C9-VM
	for submit <at> debbugs.gnu.org; Wed, 07 Oct 2026 07:01:57 -0400
Received: from mout.gmx.net ([212.227.17.21]:47973)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.84_2) (envelope-from <michael.albinus@HIDDEN>)
 id 1xEPPG-0007BV-7d
 for 81976 <at> debbugs.gnu.org; Wed, 07 Oct 2026 07:01:55 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmx.de;
 s=s31663417; t=1791370905; x=1791975705; i=michael.albinus@HIDDEN;
 bh=abYgElm37leXpgzexTPmM4DJNLmmIFnVQfQRhgmlmlo=;
 h=X-UI-Sender-Class:From:To:Cc:Subject:In-Reply-To:References:Date:
 Message-ID:MIME-Version:Content-Type:cc:content-transfer-encoding:
 content-type:date:from:message-id:mime-version:reply-to:subject:
 to;
 b=sRZt+plNaSFtWSxpftYJ0rDv9RN/WuK/72Fa5cH2h4J1kDXS1fwz/ACD0oY7eb02
 B40QTe0FWZk9Cgb51OuYuP2HAjc5yBzpJD7lv4ulC8q5eKBnN700nqqGRr/EJNf6Q
 r76/5o6amPTJWwiOpaVpLnwNf0VgBsMi5WOcwxTsdQsq5fjhW0O/IWYsG6xHnyqfg
 KK58oRM4HpSgT1IqxsIRzkt9O8A4NEh8w3Y5BESKw0tpSonGRSVG3RxgTRU6ki11F
 yZiMEGLya3Ub3qw1aa7r8oKBSv3IQjeGf7chP9twX8Q+6ZHeKPNpm4COpaCl1ry5j
 zq7KbgeBQR8aRwkg/w==
X-UI-Sender-Class: 724b4f7f-cbec-4199-ad4e-598c01a50d3a
Received: from client.hidden.invalid by mail.gmx.net (mrgmx104
 [212.227.17.168]) with ESMTPSA (Nemesis) id 1MbAci-1whYYb0tZo-00Zk3i; Wed, 07
 Oct 2026 13:01:45 +0200
From: Michael Albinus <michael.albinus@HIDDEN>
To: Rudolf Schlatte <rudi@HIDDEN>
Subject: Re: bug#81976: [PATCH] Reactivate auth backend macos-keychain-generic
In-Reply-To: <m1wlruq56f.fsf@HIDDEN>
References: <m1mrsw16we.fsf@HIDDEN>
 <871pa7t2r9.fsf@HIDDEN> <87se2lstrc.fsf@HIDDEN>
 <m1wlruq56f.fsf@HIDDEN>
Date: Wed, 07 Oct 2026 13:01:44 +0200
Message-ID: <87se2hdbaf.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13)
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="=-=-="
X-Provags-ID: V03:K1:1lqOcMyYipFjj3dDDZEc4iOKB/0dY/EgcCsJv1l0ER/Tav3qgZ8
 Hf/Ylc7ZKe4GKBdj+6lroza2B4p3KMuINgVcYQBg/TO5RFiGTTBaUBQN9IuTqpAV82CxODM
 Lc0DaoA0rnglTDgoIylmxLsep0NBNQIaxCbQphRGF3qw19SFS4E+xk3CebTxhqU+enMRAQr
 SNaToHZZ2l14yK9CdoPXA==
X-Spam-Flag: NO
UI-OutboundReport: notjunk:1;M01:P0:K5WELm+40mo=;idLyqhzLfiZuEdVWPlXjyEYf0HX
 /8PwFoJ8ItjB7gNPIzekauX8QRClFM9QTxy+9evXfT6XPF6rCyycZU/f3WeNVNbnFtdTf6rff
 97OyphDv3v9w1TG4VeFIySPwzJ0jUp7ia7vUHF/0e28RbG9p2jr0SbUQUbN/bHmZ0z9xlmZlJ
 D5KimUwg05sii+ILHzl66zRbdKHleFbl3YlhfVVg1kDoQvr+Ajert2bQaEa3WlbFHduCZW/SH
 gLp2BQC6SlrpFmHtlEQ/eLnjrXYbDDVWIS9pmwgaEjng41WBsCLjHg37YlLYBmOrkPCC0x58e
 UOwONmHIrYcq3OU1QtSN/ANtRuhozHKRpWi+miy8DPqC/MFqvTztM3kNdDstbNvmc1SCooi1/
 jE772sH99w+P9n0jYrejIoLKzmQFQPeBs2HHQvRVwro+JGcmV33BTYyyoTRSFPtX3dHdyaSRb
 gn1qK4tiKXLSxvHpSi3T0Nlc4StdEM1uHeUkXGb2raoHFjxx7cLGa/IecUVb+J/Tb37Ws9fL+
 mG/vwQ4cRC+TEh+I/baAor7jvUc9P64VVZkKi8vCjQwgEGKfl/tGSK/FNkK48OrAX9ziKWcub
 Qx4tbG0OUxjpVL1zRApGboIOmjU300DGMdkWHupfC3b6q6f164719Vlk2+jzGgQCj+/owlzNB
 uy0TtG6rYftFBY2I6vydjgLXjoRiY9/4zcoe5p9P3GP0DxHBL0+bptkY5gdKb/IuC54D9VW7D
 5TOYrlKBYZ+szG07OYil+IvQRsC5FPHT+WlHVPghhthg7AN5sC2umfZ5Noy1VEpb+6zz4spCa
 RtfM/kMH/5keAiQ6rCE5DxaRP/+ntCQDBb3oDWOhdaie8x+7MI13ghe5YJq1CMG+lf1ihGzoF
 BrwJaeLDMjWq5QMeI+36CXIbERxSGMwZkzUWzkorJsGYgy0x3E1gjR8pZy63WrVT2F7EGZl1j
 Su0q84vrthiaNKDIjDHxieFNT++7sgxUYmHlDPN46wseala7H3c6GKBN9dT5nbQXnPfhgSqqe
 vhwm3sugS6qe+nHVAdODnNlTgSXkWX8Eb71BdbnhwiZNEJUP+TFSVjI7roAYp7W/OXeuQvdr/
 bCQt6wwwQourX+5L2p0VGGXhVWIbJFHfYU9d+IHLE8su8K04IT+F72gX2W8O9une9lXizFye0
 IGJtUeequIcrv5n31T0WC1k8MzuI661kzcQB9XF32E/I4uUlsv+uqXEJ//PG9JSQUv0TTH6zC
 /bOygpKoBuyFyjEbPURKcPPJdODjFtWqNO0bn+NVMS2FmRyOWXBrdyhfJDkE3fP05JJaK+vSv
 85qO+C6dWBG0NOTv9Mue1gLbmqDyr5Wxowe1ziYTZU6YZOxBYlvEfXg1Km/V1/b1yR8HRvV5j
 XbUIWIOPbfeozeaWZ75J+RZRUKZ3gqYzbu+3UaKagRUtW8geeUsT22I75xJLHBD0UU2NssUaf
 m0MmVv4Jo0f1I8jUXWmziM+mih8x4DKH6dFaelJQfFHB6NLcy2gKOm63vxRZ59EyLuiQ0UIGn
 pfZtEveF32NfCGERAMhkf6Y0I5BQRB5lhbmNhJ2hKtG2SWNcfisLP9Zxse8NXpfdFidCJs7If
 tiDJdTMj90GoatGsQHMlwrY0F3ihZ/P22nusxRouYfhI195IDSQkgJ8JP1g6+2ElObkVSPrnJ
 MZDtzzpM4fBT7z7mdrCM8KaEsyZ9FYiK/zdnXwV6RWbArsADgb/MdYxMRDrjq08gnIvzL37OV
 Wwf4tZ0l1azifE9xZJseh0gy2DbXFqZ1BhSYL4nuyRr+ZoEpi/YjxfOhkXPUmE/OMA0ZeTHAL
 pofTrmEI4kwzsZC+m4r4qRvM11dXOrz4nSyap0XUQDVuvsIdmXITUaYn1xZ01HIqFvzcOceFc
 QsQ8a8SJjpoXz3f4gqgnBHueD/v6vvqzs8iF8J0gTEsqh1jmBAzZdWYLNfpOSldNn2ekLYzMS
 qI1ye4+MTQC7sU0KZSHSEqutg1SZtGROk6XWtBjei0Wol9tD+EDPdiPp1MKKsBMgcpZElLdA4
 tluNNloYrgH53WyCV3KfCS3fmt8RV9FQJtExO8lk6sbBhmSuV/x4+wT+dT1q0aSlJW/HXOEmx
 YbDyfzwBK7DtFl/YDg7MYUGg4oWbGGl7Rm8c+VIqDx/9A39Lys8ikuq8sLC+osyod+L4eR2Xn
 KjmdGWzl4J1Q+qFg8JOsQwEYMk7OdrKdejXMcC9QnSsWcEYwaUXd1B9jdbFTwEYEJBoC2iIBa
 mlhB/vDvtgJThhbD/u5PlS0S+w372mg1uvEB9yqtm/x5OaI5XAWkVbjY2v5uly0UCsuH4QffW
 DqoGw0qoGgC7+h5tRFXNtJRB3F5qcfobGyfRgNGtUy7j9uQA+Xv4HFnTG4en9Iqptg75HxzXp
 MdK7WkjmPjRJd8a00Hq3wMgE3oBshI7iIRaiAnSW8wM7HUCGn0DrVtBmlpd81m2uQUXmyODW4
 wOGn4USMMYKYTE4W9UEA6FZcw3mqerQW4DJFlEpk0XeBAkW5h/38b96ZmsNQV4AoKj5P4vmzJ
 quDUqBrPIiJhSqt6YQn+jUGzKdn8FDpS3d6MbTD5WlvvKWvrPgCw9gbeJcktT4r5d+cRjW5qb
 nQIdoU0gKjK4Hpy1LJqsxe5vJeAgdB1C1qDSzHgiwoXqrXSrBZSwyBM+aqXpmOTzCgdubj4l5
 HA5vc2Le5dHSxnZqzTqgW+EgO5VYu1VupOZ01VNqiyWXqAdKyktlgduTXiaYLYtLotzaGNL1F
 qRhwN4BNZYmn+9ngQ5c11JBYlq7CDqyBkJrxYDd/Eo/EgtnNqiZgz/5fhwwE5MIVXrhOIB8DY
 /7iNoDF0F3AfnRnszTuYddIO7uHJ+DicloXMo7/EGilo3vKNef/K2Tr/0uYjJsAP9/QEV3Au8
 WMaiau8cDyq2lbq6cNK/dxUMcbgdmu910GtSIYZxPJKdKASadJe1CIX0jlQfX15f/bAWIzUdI
 nLT3sHL2iqF6toIZQi8erGPb3UsRHC6Fe5RJ27s6TTcKVJIDuL2s4ZhahyzzcJQpXFWhWHYaX
 YjbV6T1yISAq9JsNO6iKQNDQsVRLC73v6t7ctzR9t2BxKe9Oa18I3WW5+qtBr+/N1GiAUjaAr
 VmLFZZvvqJEbSYNtI+pc4J2A96YbuGx5i5TG5dVGlPQjSrwDXLxOQ3G+ekzkkKvWkrVOtn5SE
 yyb6tzbUe5rB7jGzANAJxfTH+aPdyszGLE8UHACk/skYlMq2s8JrGBnUYhxglNPf9fU/HbVAk
 ruxdFGW3LLttx5cuJHZxnPgHF+BrZNH+xQUrdLDgk9y3FYFnUWvnFCY/6FHSsYoixVeFT+Lh1
 B5wjCv09MrZZ1M8rMvYV0AtfBncD8sckaTgbQqAdfAfhACJkBC680MRFLttAWDTA43v/KlESa
 MFk/nGL6QNBhUTZPUjepqy8Vf4c/nA09vdS/nthSjT0+xbQZEk8Gdhq20DFir5b3nxbXHAh53
 GwQAWvEHbjihgKcCyQqqH1KQKFbSBz2x9bwaxHZHVYrQy7YmNAgpjQaNXBNUs5j5CuHeT+8Zn
 Q3GgA8/iGsyes4NjCJS3q4c11v2w7JpzOUJTOQ2KP5K2InOTcOgLskp4RTgGrFj/OL0e9vzPJ
 rfaTYUaga88daLJ3go8Xj+2W4k/SuVMCaPeSvZ284XSv8nGLOYjhl2pCIy03gjk+PJ/7TbGup
 X+lgYXlr3fbRhJPFCMi2l8pZfZVd56Rp2KEYlLCAXmXvLjOL9y+mUoOLTED+ddamD9fAo4/wM
 tgnzd624rGoPf9OQjfHEYQK80ERWMCIuuFwNIccxKCF6R4aryA6OnXqFbZi3JfS7we5GpGPkM
 oKD4rgJ8vbUKsSNagkZH4PyzI6WsaOpRhoeI88Wu5elAujb3Rb9/d6t++o0nTKTeG71BJNCz6
 WkF9chNg+MqX1lRayeGkNNa14tZKWL3gyFG81aLdJcoMQp1QDj7jPsgE5L130IS7ylBgDp+PL
 lB+3l/cgYj5Tnd840NQyQowrdh/QxArIuSzQ//M//z7hGgd3TKAAqEaMIdM5pAvb94/xaH/hA
 GS9qLFG/JUkv3YmJEOlPCxEcW205fPBcA+EeWwU5ZhgHfC2vh1aqzNYxePZun1fSZJ/bF+GwQ
 aBm4HZ6wuiqtPV3pyIIabLw1URCM3bjz0JIMVuYDMxqbe3CC3GAUzIP6FLs9t3Fp0w1vKkSd0
 MF7gzbLc6YVKO1bGuKu0hTIsJNrPyZyhyfyY1INRYo0fTLX54tZBUx2kqDjVTXK8lp5IT76q6
 UT8S3cdwtI3hOXSNd9Ejvsj4mAIOZECZvxVC1MrMHH/DVflt3auvBE+WYVnT5DeCV3W2/0fKt
 gR2bhNAWJLrhFQ381XOCjKVxcILF/1RGCQ1RTG71qw+GdFLGHlbaqoqD+AJVipXe2WOP3J2td
 NV6PjA6XchdTWvLRaQ02hSHMqyds+jLK7gmWod7HGfbs0M6F0uvXDsgbNA9m/23enSfxaqC1S
 h0A5ckTZ6OzamTCmYHEvHcQHzIZ4PE0L8NkxHl0DY053ZL89Jc6I/paYmPjqWEAYtEGirLzIa
 0KbGQUzG5DyF5FIozNoqgbdEFscSo4pDXoGjbTUQKPmdG3C3U5gi19WelbD7eCzeFOIU3yTrX
 Xg1Y8T8LTKqZKdqyZOGBfIfMqmXjT7xRIJziXWFKqHzCMicfXRBJrBmmnrxOgwNY/nrJFVAgE
 GV8QIBk0zHtu5SFnjDzOg17c2RatKEpmWQ/69aYJSC6q+rO9RjIL6RyaS2OxTTR4wu+DSiRNA
 P6PheIkMdPZHRsZQaxGSWv0Kpwlih+MbsuAYN0cwLX2/xmhoUp6yx4ogyHo0Y94uJ26911zN4
 8Voq8yBIrjegQ8S6od4SFpcZHA28i4NC4a07WXMEBuJ0QK8gjkA8IpdUSZ6Gj3WZ6qy5CCdi/
 aJ3807aOwveCbSZjuLU5tPQGzv1b3Ks4y4LZNRbWEuyKT8sI6g4Jeun1cRnru7IabtA8Qf2m0
 Q/lJVgHh1d//R34n9EOEMXGcf2W0SZrLUu6EKtr5lj1BJcz92SKgzvycc0Dphk1awhSdd3IyR
 lyvED0KGUFElPr85h1tLbtyLzVvVYUrK0VPt0k0D1B9dCPB1KUv45UjIygjRaFcVjpfAVtGa5
 jJDbVBS97D/R6OWLL5FKUJUyNc6Bnq37TBKoo6IrlDdY6UzTtuq8t00HzF/sNNSM4JuJZ8ZX7
 c0wwAD+WHbUSVbJwY30M0lGJrK/Eo66cCDvn0EhAY4u6guWdWT+PP+NuEvXpjIfTT46BkHsUP
 +huz10+IHSSsLy8fJ5LX3CaMkBvQgpF6PNXXU87QByDaoXKa1jC7Sj3v+nZCtC/3L3K3PsN2G
 QRLley7604oY2dVAr5JJepsSjcblOHwuj8tCVQc8B2uLkX8fwX81A64Gd2QK31xnNSIDt/5eu
 0FK7O8XaGjcJcEmAnnRcRVJtzTdqL9ibMk8dw8wPziFELVFYS0hNnyNjs2MDuhp6mukA5D+9h
 wBV9pvFaBZt01pp4Y6smW7a9YuAy3ToRo0cZ+BniVZBv5xKdXWjjeES8H+lNE4Ar4n4DUpH5J
 HIb4v6B9CKTb9SDgR/2GVrrTTAbS+m459DbPBXxVH0z6WAoct4m74dJRFCq93TFPFWO2n7xkl
 A67koMtgoYPXHgJKd7liEAeNRgfhq9UYRtH3i581GTEaZSWce+LmmOlnnLMHHTxQUo8eqJLv5
 NqWYXyA7K+nq4T+jmbLVVbGsVncoFpxeal7MQZEXQgXNy65iH0K7lOw/W/ci9CO7qf+OnXmvf
 PyPYSPwpEFnAZnyurGiDdnGmiF4N1gaH/fVI4y4NJrEKQdvpKpcc6OP/vDZ98B1/XRWmpwnkg
 W8YwxpADcZKhF5HHw22oxv3BNZrVkpRsHNxrdlEAwdHgJYA3CWjhhUBjlWG4BmyEY20PHd/UU
 V+pugaD6B2nHod4UsOecPdbq3juENmPa+r1xU6XOzzGYASs/QJrsCfXMZRRYWRj9n6sWwfPl/
 saNdans7un2mdJaz6x3p8WAA3wGgqUGv4J/bgzUMpt/2xy3An0YNOv62GIzeYFEqLIF3mCOUo
 8rccwFvabiN9oCGx3XvlVheZSMiXdrD1FBXPL9w+s9CD0lIp+RT6MM+eKmiPHkb20Ac37p3Qn
 p9ZL9opqsg2K33Qln7TQCiduLti8vwzc9TP/IAHiTz6iRdxRSUaZvsSoEU6R75BK8haQjq3n3
 owFkGo3MA43fBC4fOo6voJEERAKjf+kKw6NNXFSg6/8ev9F5qlpEnXy5bBL4SxYNzSbG48RPq
 fxP436f2yplJinBeB65b0yrCX26b4exphlysYv3Lh7nc0/1dmh1w47sDl0d26Mc/rhwren/x7
 EEWlSkLoNI7E2CQgGEUtUzM1ykKAY9Ge976CPfnvHgHmDTYg1y+RT3TjdUPHKU28sh2An1mIk
 /usjqMM4ZH1IQZUGWN/7889+EqBS4nYmqM17B8Sp+fGTZaU34RxGSYcu4nAESdDBi8u0CSybY
 Ql1ctAuqWQqw8zC3AWYhoWY/RFAivDqZDwe0j+TYn+9m0YqfZjxVHTRiJ0nJtJORDGwqyE2k8
 faeQ0fc2PhMeOWfVOuWhtTCP5xl6fDlQZ/6gHperZaEyKB2EI4IVbBkxMObWoONmtYkir0NMf
 xsRLwm/z1e48IYr4tC+Q=
X-Spam-Score: -0.7 (/)
X-Debbugs-Envelope-To: 81976
Cc: 81976 <at> debbugs.gnu.org, Ted Zlatanov <tzz@HIDDEN>
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

--=-=-=
Content-Type: text/plain

Rudolf Schlatte <rudi@HIDDEN> writes:

Hi Rudi,

>> It looks we are safe when modifying auth-source-ignored-keys to our
>> needs. Testing this, I've fixed also the handling of :label. See my
>> patch below.
>
> Could you tell me how :label was broken?

:label is part of auth-source-ignored-keys. That's why, no label is
passed from auth-source-macos-keychain-search to
auth-source-macos-keychain-search. I've fixed this in my patch by
let-binding auth-source-ignored-keys in auth-source-macos-keychain-search.

> From the code it seems that multiple labels can be passed in as a
> list, which we transform into multiple "-l" arguments to the
> "security" program.  If so, this needs a different treatment: if I
> create a password with label "foo", the command "security
> find-internet-password -l foo -l bar" will not find it (but does find
> it with only "-l foo").
>
> The question is, does calling 'auth-source-macos-keychain-search-items'
> with a list of labels mean "find a password with any of these labels" or
> "find a password with all of these labels"?  If the former, we can run
> "/usr/bin/security" once for each label; if the latter, we can't
> meaningfully return anything since the keychain only supports storing
> one label.

The former in case of. However, if we have several :label arguments like in

--8<---------------cut here---------------start------------->8---
(let ((auth-sources '(macos-keychain-generic))
      (auth-source-do-cache nil))
  (auth-source-pick-first-password
   :label "mail.example.com"
   :label "news.example.com"
   :user "user@HIDDEN"))
--8<---------------cut here---------------end--------------->8---

only the first :label is passed to auth-source-macos-keychain-search-items.
It is a list, so we must adapt the extraction. See my (changed) patch
whether it works.

And we shall document, that only one :label argument is useful.

> Rudi

Best regards, Michael.


--=-=-=
Content-Type: text/x-patch
Content-Disposition: attachment

diff --git a/lisp/auth-source.el b/lisp/auth-source.el
index c4b43d076e4..dc746a58ad4 100644
--- a/lisp/auth-source.el
+++ b/lisp/auth-source.el
@@ -2105,6 +2105,8 @@ auth-source-macos-keychain-search
          (max (or max 5000))     ; sanity check: default to stop at 5K
          (auth-source-ignored-keys
           (seq-union auth-source-ignored-keys '(:host :port)))
+         (auth-source-ignored-keys
+          (seq-difference auth-source-ignored-keys '(:label)))
          ;; Extract host, port and user from spec
          (hosts (plist-get spec :host))
          (hosts (if (consp hosts) hosts `(,hosts)))
@@ -2171,7 +2173,7 @@ auth-source-macos-keychain-search-items
                  "-g"))
          (ret (list :type type)))
     (when label
-      (setq args (append args (list "-l" label))))
+      (setq args (append args (cons "-l" label))))
     (when host
       (setq args (append args (list (if keychain-generic "-c" "-s") host))))
     (when user

--=-=-=--




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#81976; Package emacs. Full text available.

Message received at 81976 <at> debbugs.gnu.org:


Received: (at 81976) by debbugs.gnu.org; 4 Oct 2026 14:26:59 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sun Oct 04 10:26:58 2026
Received: from localhost ([127.0.0.1]:48678 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1xDNAz-0007uh-AC
	for submit <at> debbugs.gnu.org; Sun, 04 Oct 2026 10:26:58 -0400
Received: from mout.gmx.net ([212.227.17.20]:35627)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.84_2) (envelope-from <michael.albinus@HIDDEN>)
 id 1xDNAm-0007t1-95
 for 81976 <at> debbugs.gnu.org; Sun, 04 Oct 2026 10:26:46 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmx.de;
 s=s31663417; t=1791123990; x=1791728790; i=michael.albinus@HIDDEN;
 bh=/H5wCqpDguEN+HrWsUNpkgjUViLXNpaQhzG0goCqMXM=;
 h=X-UI-Sender-Class:From:To:Cc:Subject:In-Reply-To:References:Date:
 Message-ID:MIME-Version:Content-Type:cc:content-transfer-encoding:
 content-type:date:from:message-id:mime-version:reply-to:subject:
 to;
 b=sc68BJ3KKYiMZzg/QWZCC9xA1t3yBFUndM5kDVOIbhla8WWBg78QjSQZMglmVGC4
 LpogGXE7DhW/EWRwF6fAvGyT9BBvFiIYdyemx3x2cxB4W37uONQT9mNetRnrb3S7l
 a+dDlDgEEFXu2uChCCcDBuJfdVyBEH3mfMMri9DKP1bNA9qInQBorWV7qcg3peefa
 7yisjPm8xb0KOIFed1vaLyS0WhiH7ROJo9RhMRtv9UE/Kc0jrj2/8MO/s0I/vc1DV
 SqJQP8zattT36CklVELuE/34DApTbYQ112gqCrJy6bOa5hfdhwAgpXM59nv2DKEEz
 0SzodSQr21E52IWTxg==
X-UI-Sender-Class: 724b4f7f-cbec-4199-ad4e-598c01a50d3a
Received: from client.hidden.invalid by mail.gmx.net (mrgmx105
 [212.227.17.168]) with ESMTPSA (Nemesis) id 1M2wKq-1xGgYc2988-00AQO7; Sun, 04
 Oct 2026 16:26:30 +0200
From: Michael Albinus <michael.albinus@HIDDEN>
To: Rudolf Schlatte <rudi@HIDDEN>
Subject: Re: bug#81976: [PATCH] Reactivate auth backend macos-keychain-generic
In-Reply-To: <m1a4otr3id.fsf@HIDDEN>
References: <m1mrsw16we.fsf@HIDDEN>
 <871pa7t2r9.fsf@HIDDEN> <m1a4otr3id.fsf@HIDDEN>
Date: Sun, 04 Oct 2026 16:26:29 +0200
Message-ID: <871pa57d9m.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13)
MIME-Version: 1.0
Content-Type: text/plain
X-Provags-ID: V03:K1:wXS0IYF4EkTH7Nx4WMXPAg90ITYAx1yooVbRfGFZw+YDYYEfTCi
 tAq9dh0338baqFyAd3W/fbLsAQcn4z+8W/94wws1b9x29KWgbO2soQYuqgGLxvI1Fnq5N0v
 CZGX0ZmNxShkvE+Jrim/mK35bQTj0ihwD0QzWL/FviA8eWoqB9cEF+7qOfcad1fheQ5IVWn
 xJge1cLCFwxcAqXAGRi/Q==
X-Spam-Flag: NO
UI-OutboundReport: notjunk:1;M01:P0:oKT0JZMQImY=;vv8//Z8ttRxUx7axhp7EzRMSbh+
 oqbn3ZnDgICSgzBfhwpr22cCbaq0JjyeAlBNzdYNNSZATMSf4Z3pLpIEr3MhBu22HKadg2UC/
 1JbkxIJnniaSOXfgnQQGyx6eVF1E+FJEAI/dewBBN2Ua/Qig2GCIzjJN8mWb85KeDnDeJIMbR
 1+OdbWay876f1Rb8Kb22yEsV7hd+OugYJlQxNz8fUybutZiLoXg1IYfhPBJlcxZCokL0qIdiP
 luhvjOhBclFejiGfdZmVIR2pc/fhSJfPdHAWYSfIXG2RCzT0lkqmogbsHzwUHx+lz/LO1+DWy
 6VPlswK5DYZkKxErDOqAlHIRqRnNETnWrx7fIjqKhFurYGvqe2Gw0YmCsdb2DbqjsqAwhHuo4
 zJbYgfgOSwIu7oDvThx1wl6vChfnF9P+bZEVvgwln2li6QcPYMrQAGOBgYf0K2MxP62ASwOn8
 oL/Z8o9XGHEI8bG9AE60nxHayRvTofnU+4zKmILD0CGOs5TSLwrY/eSY2edV/oJ/m/NmjCu8c
 eeLI6pmBxTZ9djMzH1xiNMPjbupuFR/UZZPlAkQSEPnIQapI5UoGCI1WAablHvHXeZGRLCJoF
 aLUQ2SmaNtA/B6j0So2aPVf6zWYapPBAjNwz4Wstyd6bMC5dkEk3dYB1ZZMTI+VbF1rtuMzkY
 oi2NPZV1Z/FRpUIjm2mbJbmJABqdUGVx5Eez5f3zwPEl5r+Tq5fd1KrnYnkiL+DG5WgCzzHbO
 IMXcTjpSGSYs7rbElj+zkBpZEgbvLQoIJvS21QctsA+zkZEXk0tapPe/81qqVZyvRkPesgkF3
 hXjdVpH7HiB6kI6181GxA3dnXlV9EUnBEk+IHNUvbWy614tFcs6Ra/vuD+23DwW0Mrg9OJETy
 be1E7fNyAK2J2i5UchYe2WhqOSmvhFEQCCGJkseB1Ksh48b1x35162Kp1oIRL3sGAfRyhcngl
 G9K4UPCAZwemaL07PG7wpzbkFcRLlhX0AlCrOSELN7YejvbUkmVAaDm08idVuxLnwwFijTMmD
 U7/GwY7/FU6E+/QoxWE0RH69mTnq8MMKeo+zwlbQeuCNBGX0rbdsaVHzaP91JSLEuvkvdENJt
 EXK1iRin6ybma/RmmIyPLGVtNImRgBHxjZ2pSv4o4xTSgIAB4+KBkDns9Aq12iQZsZFu3g/uH
 cmoFvZjueVgFgBhGEtaEj+DPSE4D3rkiydLYL34rUbxSDfL7XRA7moN93/AxYN3ok5u3AReV2
 Q5h7itV/fdsL5zTG2NOdLn+kiZmEacgn+iO5eHtL8ZEdREcDEVxNBNTT5dz9bAHdF00Wm47ro
 Furd9/Rjvb5X1glATuppe/eMHMrlJNTw6OtHQ1lTLmB70Eu68uEASUP6vXDvglYyXybrvhmlz
 wPkGCGPNfMCnMuJjvGdFg0+rK2GtVWPxkGSUwuJcroevNrU9D9scPFsniGz6WX52+chWQeFc0
 kWPtmvm7Y66aS61creQiIu9DdvLl2WHaRkPr00C1Xj7W98NXqmFiO8JVhEfZBfJV1s1EAYRZP
 0exwa89N1zg4N666K8t1ciZ8h/cIJy762b8emGZdPNZhe0crj/TDSd5AjdUwaHcw1fcimIwFJ
 8BHX002AXB+Hfin6bGYyaXUZJxcNaS1YJ9WQZ99i7hM7UbQhkprMhiS8s0DiwTBpZ8Zon7MVk
 qxCtuYMaC/Dn2QXlBEaem5elRTDNqGASNCxZ1S60nwYR1NOd0LMYyxPOmRzSXPQE7Ybqzgzgl
 V4BmQi49J3nmC+9qbSfjB2fDcdMYkGgNi6b8j5ueGAAvV6u0ItlPbs8VgAFEeVwTuL7YIHdNV
 kNssVY29447QI2dlgVpOYtSteowanfxeIdDz0HJG0aRmlI7ypMXhp+TFcs25qRjBPXJfmQ/bd
 qRHg+E+dAAVT6AxbWpshZxvO8nSAK+W8gQX6D0NYLmMy32ypxRVQPbyKIvv+q0hKsdX8nvUoE
 7/R+E2nYwf/0ivkIxaznrfbD2cbEjiIp9aJpltu8QoSi6jf6rwXg1BktMVKF36+sFbuxxRjw4
 Ahzj2KadUmTH66xTdVm6BTQzYwCiOK7kFxwJPZZBNp7K6PFsUpFoPbiiCLhmOEgiVeOTWfX7S
 lUJmIPyt7eDQWx89qm4VuReEjaWNgUK9K+B51Q+UAKFLvu8pfX7/Nj64SXyUSKoqwi61QVLWX
 By4rJ2TlsI0+0zwftuf2Vb1pdUhshsJuRIx2nGl8r7wfXtmfbki5hWYUpFag+y1pdoNrIxxfR
 7uzRMOJsGljyvINGJFdk8uM67fsbdqxuMXr51Ht+d3ny8ML96KM0om8E2tK6RW0WnoAfhi+rK
 CxyzEzpspFD3Z+Zugs7DoqRTQLxIh0kC3494SVFlrslBISw3CMBzs2vBGdaK6YBdifWQ0Y8TQ
 OTlyctPWR8TO7fTJfNiNWkYp6SUd9SRKiByfEJG512daGDWXo9c1b2ur70QuAKVXzSLOVbiCs
 jPzuC+/CDX/zza1y1fOaB62zlhzFBpqBdnlJ3t5sIIsXRJyMArhn5D4l1kJajT89CTqrrv9xE
 GcY61s35OTxT1BuT+rwcLYgNOnDbNSuMYGi2PN/3Xk31sz4KBbYajIGWGni1lParT44KfGQkS
 lzaXUM95HCXOLlG0jOmGvH3/9wSC5PxHvCFiI3DIX5tvevkHdvwa/w+wsLxr6gd4EMogt2JDq
 5J0WOXRYDKONeZ/H1wx39x5LKmubQh195mMMYAXGgbUXT1ahYgdQQMnScN3E0m1mH4IIs1/fZ
 V8fKnbM3R4+KZ0iVopZMu4t+AG3yNMGZIOiNP/dNnrrxquLpACeHk+7XWwpZ8gSeYTjAvl5lI
 ZaQJfxUjTj4RBSOb/9Z3jerKSu92Fpe3hcOsNO02CS3Qk9HZChuzWPjVaLFqQdpjJU0IcNrSn
 FuSVxUXIzNRao4CqMbYkz1uW1afVSqMtIhAW1Kf4jQJnPuxhYQLa11WQZw7iyp5TDqrVnCV2W
 QrQN9aSiqIyfAwkUNqKaQnH+fo3QRRqgfO8gP3DZJ0AbPDBZ+r1OWxrlz4HrDXHOEQ3wv4gAi
 1iKnbie41bwOTzlH+IR5YBxbOq76ZXIR1HIiWgbvwnshqYJpPErXxtmxQltxJkEtYjT9Cfi86
 eV4mx0yYMaFEYNYD7AupBKmeCV9Nf/AhMV+yUeyMMtKBiF1dBIeXECuN9bmKsFmkSqSgQjuSC
 nSRZVhSI5sxwY++NoBHrpV6CpLWYh3QImzFhjfwF9N02WXi9eO1Zlla+rs5nd6G35yUekd/l4
 AoY8l3Db2D5FG0laAj7gSKnxQYcet+sS9m9ICbulJaGDR0YImxwCUotsqLOA9jeKJNrOgyxPZ
 9Bj8LLx+JlVswgYFDS+1Zk3VfQw6BjSlBuFdDJCHkLOwjmWgxXvGyQf57VzvqmyTDXFzKH4f9
 GcJIIqXc1VFyvwxVpLQ2WbgOvilSQpaTNL7AyHmJKUb+iRnvfO8FdY3uSp05mD6lUcLOz9OVm
 nVrNg3ceIgS9CZQ88CcX0pN2N+HlCf0/P/WvosZ/U2NrLFkLoKOJjSbZbge3ODpKouYTG0W3U
 0JK28yVFop5i+VTUUJfWtfEjSe70eBIG++NnKD65eabCNn5vbtrXiJz055nQxN+yY612bLzx3
 Xxt3wxrRJLUz8GoFZ9FSrzmDz9IXgA2gG0x8P+4YN+t89JYdGBskVtyLtJcqbz/AzVYVLlDVw
 AW1OaHMl0Ku7D6I1bAqkhm4esPqNkz9mcWXxLuW0j+dsjFNVEkuLVCaIxC8/068/DFjoK49tk
 rfImLWl5U7K9TrAqWR7M403vbydcXkJj8T+JdjCV60/8wbyDFBzdiXyNtKgHkyeBKasbFawYV
 TRTi8IFPx1PISljU9ZCAQ4eXktcEelLH1yV4RPFc6kzp+9Spz/S5CeiXWhDwVXqZ8yXukNL2Q
 a9zy9WZ3x//LFWTvc/SnPIDPgvhWGyju45e8SQjNcEqkIdMQzslhB+IaDc0QR3QX3GS330ZMI
 qfAl4iS05Yb+5IB2Q4Q6C8oNVu9l66d4SzeBXWHf+iqhT7asiI0OvNxtKmfCuPXNYsZXJ4/Im
 X/PiFZCxr+kML2/Dud8BMmAvC8y7TYWpW98tNC8EZzx9+rykHU5EnQ+QNW4QXtK7fYPGs9DXU
 Cac5nq1d54hF/p6RsEF/BxlvtB9PE6BJ1o9u+jKZRUVQs/H6b89MbINrj6NPyqCBaD7CP5/Ud
 8lxyQeNQ07KRNKaVJHbl82I3FoeTcFU5L1C2ZvZbQZq88xCaqpWrO4lDIelryiQCxiVHqYtMU
 s4cUIuEggUg28DBfqlQ89PrBGYCvHl1azCxV/W/w7wmX3v4kantiZ/tWwKnwNVvvibOJhkqCi
 8ue3OPlf3aXwWtucUifKH20UHNsWKC1eQS7R4QZ7Ap7jXj780I68Xzs2El4v7F4sjVfp0sMuX
 v2T59ww0bqBD1RRN/aJX/exGxFU/FWxA/FwhKMxLt2BGCG+xUcWu2kmuRbAlAXDedMjVYZpGX
 N5TwP+/CR1ZfNvxERUZpVKZSXjJtr9HEGBJXF4gv8XFrFkcCXblaHyH/Xa9YVYFfRf86jm+iH
 JCxek9Qfn16ZouukQMmVXfO0cDl9pe+g8kRdEmM7AuOzVY+8XWwMlNWmxmL87Z6gBDNIKxxhp
 d+S4nMfT1N9UikQ13rSNwOaSVFvpOHwd/gInk9t7Kqw/SDIqaZ4SJLyvR3qOiPZPMMHzd/qok
 TdgG6JZT4dHNemu2AX9nKM/ZJfHJqZ3FDc/lbpGH5vW4XZ8z8Tw9LQU/WmO7YlF43SPn95L0d
 MvxIJ5nviEcD/wR1GZ5j64LMDoFyoobRoy61uNenVs439nVOX7GtIacXg8RpwxL/ktaDBtdBb
 MDNrCictC/OtPZdy9qV1LowXczvWNeuiCpFFAc/UGCnboMb08z/fTOvmbCcC5ZQMsUO+T50V7
 c0vERyiQki4fTLi+sUD3tNyHhro4ych1k531pgYLqzimze6ZVUKEw4MivcszmxBf/7J55QJ9z
 c7tymp0cFo49i3EIwijHwKGnoClfXDHTOkPeIITCngS1Ah6GAH8L22sIQuQMmy49Qc7vbxNji
 7wIlVs2jLf17HLqYIOkxp+8lbHYk+7yP54lNHOnZkApfo0M4pvJ/Kv7u+x56XK5aqgaBJeOJe
 7BrsgXmJhzxzxvlgZ1mOc1Uz0mYG1MXxj3fbV4e3yyUEZKyTu/eYtyW3Wfc1QqOoOWes+rOgp
 JfJ6g+Jn0ZFSEIBUH1TfRanH7wP5GiWpX6PvOx3vhHj5iHtDRC3AwoD9SfIs9cmQi7P7TDviU
 noXWVGBNodV6N4vU+NXO4FVZLJnW5YZyfaLoJ1ns7jtRFuK/XQS5yGCSVzdVTj5PlCMIhbrfG
 slaE3G45374Kq2iaRgjWdJdsHvJGxXXRoOFgsuJeKGztpF1WWetDwfbI8p1se2vnPs/5fnONh
 nKEO60991jnrS1vWlKkFd2rVKAk15kCIFBntbEx39nwtEqT1cql6WQFF8EP2bS8VQkL3T8bn0
 1oz1GP0u+uqs7XhQG9mfQa3cI+R4p9t0CNuzy76v9KI3dqRoOuDwoNQOncoTIop1NxyFHJxba
 S7sGy2jV2Mv4EHV4PrwZSCi6hztRzCW7AKzfMDQ3pgxbNC5BDSe+Z/n+Ov5ceEF9hZxZvvUxx
 AnMHg1P2SKbCvptptbYAGkm8pthHG4iViCV8I5Gck0BG+vQtSBvjmBlC/59v5f8UV+UdYc2/1
 IZpBZxV0TyRG5rnqEF3KKaCSDdKXG3q7LZvg2+Lo7knmBOuQJrbhdCNwZgL74CLms7BKzKiyM
 kJwogj1hVK+T1GFOlSslC0Inj3c9K8qzwZ+4rnFy2S668L0ZfltqLBVOF7+YqN34lKc3Abiwr
 3GJY0yZkimh/oWiLxFE/3VfhXTF3ARUbPI1YUuoHnQ0COgvTQIKRglxLrx5dMXVTaBovA6kSq
 I09QkyiHb37FiuCa+d7/gd32eKWxafh3sM782UWGq60m2dV22En4fxb3ptbilbXWnZeIQRbv1
 IO7ale5WQjSSoacDXmFRQyBGOB0mG24HaLAlsS5T2FuWrd8udXy7zpfrJBFE8wldmsBWcEI9b
 el+e0gni5KX0YK/Y63D0SAWZJTVhwSyt7p/byIofQSJbdzSsGGKWjR53mVCwDXPxKkiKWG7ta
 ZZMGxfDHlpTS0raElCxT4eHX7Scq3w5p5VqIHYbh7vyZdCv6rA+g7KPJS3CyjzqEqpTr890no
 VG4JI270qSO4LwOFm4myVPGKbSYfIRWGhsbo7397nv1KYZbNkqU9EgRW4DCkDM6Fct+k+Gh2h
 5hiIuKGUYWjcfq03R+AIwJKz5Wx6/LzjsHkIrp3r3wUAF6e3iIN505vg3RE3R68XzgIZG2aE+
 qWTV4FbjYVFTPsvpIfWGKsxys0SIWwvMtsqDWupPtBoaphIp9cInQZ16NpSuAjxZwlY422HKR
 aTz/O2Av7XRflgjQ6oK9e5n9fw==
X-Spam-Score: -0.7 (/)
X-Debbugs-Envelope-To: 81976
Cc: 81976 <at> debbugs.gnu.org, Ted Zlatanov <tzz@HIDDEN>
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

Rudolf Schlatte <rudi@HIDDEN> writes:

> Hi Michael,

Hi Rudi,

> Agreed.  I'm mostly concerned about using "-c" for ":host" in the
> generic keychain backend; the "security" command errors out when we try
> to store more than four characters in that field.

So we shall add a sanity check for the :host argument, raising a user warning
in case of?

Anyway, your patch LGTM, so I have pushed it to master.

> Agreed, and I think I can implement that easily in a separate patch.  (I
> can't plan ahead for how much time I have to work on this, so prefer to
> submit shorter self-contained patches.)

Thanks for your work on this!

> I'll look at the changes you suggested in your other mail (support for
> different keychains) next, but the commands they generate look ok at
> first glance.

Well, my patch wasn't about additional support for different
keychains. It was just a test of the status, and it works. So you could
use my tests as inspiration for docuemntation improvement.

What my change fixes is handling of the :label argument, It was
broken. Pls keep this (or a variation of) in your next patch.

Best regards, Michael.





Information forwarded to bug-gnu-emacs@HIDDEN:
bug#81976; Package emacs. Full text available.

Message received at 81976 <at> debbugs.gnu.org:


Received: (at 81976) by debbugs.gnu.org; 4 Oct 2026 13:37:40 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sun Oct 04 09:37:39 2026
Received: from localhost ([127.0.0.1]:41617 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1xDMPA-000162-GL
	for submit <at> debbugs.gnu.org; Sun, 04 Oct 2026 09:37:39 -0400
Received: from fhigh-b6-smtp.messagingengine.com ([202.12.124.157]:47821)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.84_2) (envelope-from <rudi@HIDDEN>)
 id 1xDMOr-00014p-8y
 for 81976 <at> debbugs.gnu.org; Sun, 04 Oct 2026 09:37:20 -0400
Received: from phl-compute-04.internal (phl-compute-04.internal [10.202.2.44])
 by mailfhigh.stl.internal (Postfix) with ESMTP id 10F047A00F1
 for <81976 <at> debbugs.gnu.org>; Sun,  4 Oct 2026 09:37:03 -0400 (EDT)
Received: from phl-frontend-03 ([10.202.2.162])
 by phl-compute-04.internal (MEProxy); Sun, 04 Oct 2026 09:37:03 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=constantly.at;
 h=cc:cc:content-type:content-type:date:date:from:from
 :in-reply-to:in-reply-to:message-id:mime-version:references
 :reply-to:subject:subject:to:to; s=fm2; t=1791121022; x=
 1791207422; bh=Pk2jeHgOIslbosk8a5tF3JnAfBHNZCEgZIn163KLYvE=; b=F
 /IrsSwnRMv6RRSU4w4KSrBQRoDHuCgmiwtJZRvzoraaxT2GBoC3nM4isGVlIQEsu
 9MAWl0K/BFCaGCvPtRgOPwvy31k7hBsKhjwtspoZkfiZNdcPjmalvtRaz7pNK2N0
 oi6q5UK1amDlldxZ7aqOV9pnpcRt4/HEFAlUsaVdNZOf1rBNCe+iHFa00A8iKXdY
 9JMNDYzumW2565sgREIlcjVGaZgfnijhg+kYqXrw6NKdMgAgTPBytthYbUtWfdaj
 dk2uYoD+8Vuqp5I7r/KqmPI70MRFrIwph2s+T3OxTWRmcwZQKyC+PPoQRXxbhng/
 SY1NHys59QZ7Lc8L/O+xg==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:cc:content-type:content-type:date:date
 :feedback-id:feedback-id:from:from:in-reply-to:in-reply-to
 :message-id:mime-version:references:reply-to:subject:subject:to
 :to:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; t=
 1791121022; x=1791207422; bh=Pk2jeHgOIslbosk8a5tF3JnAfBHNZCEgZIn
 163KLYvE=; b=h8+TzyHgkPZlXCNwXa3QmN4ems7X2CZIqzv664delJX6sWw9cDw
 Ng99lgfZ0jLsQJc1QLtDX4KbwS5IiTafXwG5plkMVONx0CIAS3P3liQbA7CLjOyL
 PVmzvYO5MulZmJPQsm/I58ci5QTNAq1YsRQ8xos3lG/Y+tATVQ4FKTGra6M2/SUq
 ElDwQ0haurcaADbBFIVQuGfY6rGs/Es7khu223bjvPNcsWktslpBbsG0FaKf7FmK
 0jvrYuhk4YVkneVDZVI8fuZRQQFTcR7TRdknEZ97zOrAv62U7s+iCUKJYnyZDArm
 wy3K/J39dTRx73pNw1PB+n5hwO0WRopS4pw==
X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-06;
 repo=github.com/dkim2wg/interop; date=2026-09-30; sw=lmtpprox;
 action=sign d=constantly.at a=rsa-sha256;
DKIM2-Signature: i=1; m=1; t=1791121022; d=constantly.at;
 mf=PHJ1ZGlAY29uc3RhbnRseS5hdD4=;
 rt=PDgxOTc2QGRlYmJ1Z3MuZ251Lm9yZz4=;
 s=fm2:rsa-sha256:I4F+Bnw4EZ9eCm7j6mDj61AaSuiEMC/AwOL3TrqqBLn0AwF
 3XjHcYSMTRCUU9JVCgrTo5nEcE1GXrl6v5W6jjkH6Jhr6DP+ceSdx3Hlggb7eehi
 Gc/ArHH7CodIPJ7jRdkeAVZH4KbBel18tuCTxUMEm/QLuzSHHkV2PygLExW/6e6g
 ftTimufWXnvfftSD0ORlTdbgyu0//SkW3MHTRKNpDGPNC1hIYZjDoXwbDJdHB1Hy
 K+UCMlY70u4Cue5TSsbPUje6phRTmW3IoHbdB2cua3nCsb123a0w3jKaP//Tf71Z
 eZN7F0tXo2mEfto0SIJK+cfbuQiZ0rBTvWbQxuQ==;
X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-06;
 repo=github.com/dkim2wg/interop; date=2026-09-30; sw=lmtpprox;
 action=mi-m=1; hc=12;
 hn=cc,content-type,date,feedback-id,from,in-reply-to,message-id,
 mime-version,references,subject,to,user-agent;
Message-Instance: m=1;
 h=sha256:DLFHGPM7SnFXjJJqlsE4Q1RtyeCeZrXshs3cKR8eslU=:eJyDogRJI1CRNydxOCESSlaw0KyjBOYI+roSE7e3a4c=;
X-ME-Sender: <xms:flbCahdz9brxt6KawxbiJzm99cvf6hcjVhG58GAB2v-7Wd01Q5GtNw>
 <xme:flbCamqi7twfhoAEfNWhanPq0_gGL60tuLMz2d_VXgyzySoileJ4wHYUA9YjLuLar
 czAhuiDUTIahU-tYDsgt3VNJR_sb8SQKV-vr0gSxvE3IopdIohlC0A>
X-ME-Received: <xmr:flbCan5rvFHmX2JQVoOHqASSZkTopgF7FU7f-uYxkwIJhy4ujXkVOWEnNzS5ONUX>
X-ME-Proxy-Cause: dmFkZTFTDi4nMejwV6K3TR5EbWB+p2PVDh5MfBZinqG8JvxF5lVTIc8q5fUDORqt/xhgp9
 KqnQDdkvWtHPPRVCMA2hcgQaWTEzgMJVHi5b6pQktC4oH6mI7/XWaGqv7vlKHVCDjgj20b
 zJYSvtzTZvkoT+a9IfK8R4OxW46JL0A+Gt9stip+1+wnlKMWvbpNjzH7Sgp0zR/swVDUuL
 KrQ40cePKT8BpXDGUEahDydk06tjqayTwvX8nokM0GbXqdQQQw+rQzKbxOZ9WKCbLZPQPz
 lMmHWJN+u1njkzc/bESC2Y4V8PMUcgJug/jYa1di1IrGz2gXQl22qOoyd9fm9ySGSPAuUv
 lwZ2Ox+RWage7Rb39vT73xLWTqbYsCLIwtRWm2KdWUtVNAV7XzXXkff9TVFYv1BBajGZun
 rZ5C8fRSENHg+NEp1tDFCtR6ihW4ObnZHblHkYfBOh2jj2UzxX82XClXXLqpEv+eRzhj7h
 Qi0y17OIAUNpkn916Bvf2hYqiqV2lX+5GAqHK0IYwzB9zgV3OrJlPW8aFEauH0PCWQrfeE
 PUhWwCQ135zsiW4IFS1FmHR+mBCHjsRkoggSzkTXR+Nooa5W+Y3SccNFOx5oKOeNlAQVea
 /O69YKnWWCpz+ChMcEwX2UBYScLzxVU/wHjZhlh7IEFUSTwwS8IaWaZP6N9Q
X-ME-Proxy: <xmx:flbCakp8v1owocnTRCaecSDgX_GanGygCNV2V8LYpQJ99tjK_1RMhg>
 <xmx:flbCahjjy9dazy6-8AbLAyBy9ksd7BOkMSYjWhi3SkNYWnQ9B9URjw>
 <xmx:flbCamLCiETJma_o1teratOm5Z9B-ZWxsXSgUUDTY1ryS5xc9Lz-cg>
 <xmx:flbCapDZCamlN69EftRnYcmRfwN79NwIg9NjDSET831GlBzUhVtn7w>
 <xmx:flbCav2xaW0UU4ejsGgK66qdhlJCFEUpJgE5fdo3azwMmyQOUsZMsjnL>
Feedback-ID: i5b4840b3:Fastmail
Received: by mail.messagingengine.com (Postfix) with ESMTPA; Sun,
 4 Oct 2026 09:37:00 -0400 (EDT)
From: Rudolf Schlatte <rudi@HIDDEN>
To: Michael Albinus <michael.albinus@HIDDEN>
Subject: Re: bug#81976: [PATCH] Reactivate auth backend macos-keychain-generic
In-Reply-To: <871pa7t2r9.fsf@HIDDEN>
References: <m1mrsw16we.fsf@HIDDEN>
 <871pa7t2r9.fsf@HIDDEN>
Date: Sun, 04 Oct 2026 15:36:58 +0200
Message-ID: <m1a4otr3id.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13)
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="=-=-="
X-Spam-Score: -0.7 (/)
X-Debbugs-Envelope-To: 81976
Cc: 81976 <at> debbugs.gnu.org, Ted Zlatanov <tzz@HIDDEN>
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

--=-=-=
Content-Type: text/plain

Hi Michael,

Many thanks for the review!  Comments and updated patch below.

Michael Albinus via "Bug reports for GNU Emacs, the Swiss army knife of
text editors" <bug-gnu-emacs@HIDDEN> writes:

> Rudolf Schlatte <rudi@HIDDEN> writes:
>
>> The generic keychain does not natively support all fields auth-source
>> wants (host, port), so I added a recommendation to use
>> macos-keychain-internet to the manual -- the internet password keychain
>> is well-suited for storing the information that auth-source wants to
>> query.
>
> I don't know whether we need an explicit recommendation for
> macos-keychain-internet. macos-keychain-generic has its use cases, for
> example WLAN passwords, where you don't need the host or port field.

Agreed.  I removed the editorializing and document the backends'
behavior instead.  I also added an example of how to configure
auth-sources that is on the same level of detail as the one in Chapter 4
(Secret Service API).


>> To leave things as-is for existing users of the generic backend, I left
>> the code that calculates keychain queries alone, even though the
>> "creator code" keychain field that we use for hostname is restricted to
>> four characters.  A from-scratch implementation would probably choose
>> different fields in the auth-source <-> generic-password mapping.
>
> Perhaps. But OTOH, the -a argument is used for both
> macos-keychain-internet and maacos-keychain-generic, mapped via the
> :user field. So it is consistent I believe.

Agreed.  I'm mostly concerned about using "-c" for ":host" in the
generic keychain backend; the "security" command errors out when we try
to store more than four characters in that field.

> Some comments on the code:
>
>> +The macOS operating system includes a password store called ``Keychain''
>> +that can store both internet and application (generic) passwords.  To
>> +use the keychain as a backend for auth-source, add one or both of
>> +@code{macos-keychain-internet} and @code{macos-keychain-generic} to the
>> +@code{auth-sources} user option.  The internet keychain is more suitable
>> +for typical uses of auth-source that involve user, host and port names,
>> +since the generic keychain does not include all of these attributes in
>> +its data model.
>
> "all of these" is wrong; user name is included. Perhaps say this explicitly.

Fixed by removing the last sentence.

>> +Currently, the backend does not support adding passwords to the
>> +keychain, so passwords must be added via the @code{security}
>> +command-line utility (part of the operating system).
>
> Right. But an implementation of a :create function would be
> appreciated. This is subject of another feature request, I guess.

Agreed, and I think I can implement that easily in a separate patch.  (I
can't plan ahead for how much time I have to work on this, so prefer to
submit shorter self-contained patches.)

>> +@lisp
>> +(let ((auth-sources '(macos-keychain-generic))
>> +       (auth-source-do-cache nil))
>> +    (auth-source-pick-first-password :label "mail.example.com"
>> +                                     :user "user@HIDDEN"))
>> +@end lisp
>
> "user@@example.com"

Fixed

>> @@ -2162,14 +2162,14 @@ auth-source--decode-octal-string
>>  
>>  (cl-defun auth-source-macos-keychain-search-items (coll _type _max
>>                                                          host port user
>> -                                                   &key label type
>> +                                                   &key label
>>                                                     &allow-other-keys)
>> -  (let* ((keychain-generic (eq type 'macos-keychain-generic))
>> +  (let* ((keychain-generic (eq _type 'macos-keychain-generic))
>>           (args `(,(if keychain-generic
>>                        "find-generic-password"
>>                      "find-internet-password")
>>                   "-g"))
>> -         (ret (list :type type)))
>> +         (ret (list :type _type)))
>>      (when label
>>        (setq args (append args (list "-l" label))))
>>      (when host
>
> So you remove the key :type, OK. But pls use replace _type with type
> then, for the reason explained the other message.

Done.

I'll look at the changes you suggested in your other mail (support for
different keychains) next, but the commands they generate look ok at
first glance.

New patch attached, applies to master:


--=-=-=
Content-Type: text/x-patch
Content-Disposition: attachment;
 filename=0001-Reactivate-auth-backend-macos-keychain-generic.patch
Content-Description: Reactivate-auth-backend-macos-keychain-generic-v2

From 7ae58c14047726d569b3623fe38b776434bbfc52 Mon Sep 17 00:00:00 2001
From: Rudolf Schlatte <rudi@HIDDEN>
Date: Fri, 2 Oct 2026 15:57:32 +0200
Subject: [PATCH] Reactivate auth backend macos-keychain-generic

* lisp/auth-source.el (auth-source-macos-keychain-search-items): use
'type' argument passed by 'auth-source-macos-keychain-search'.
(auth-source-macos-keychain-search): fix docstring.

* doc/misc/auth.texi (The macOS keychain store): add documentation.
---
 doc/misc/auth.texi  | 69 ++++++++++++++++++++++++++++++++++-----------
 lisp/auth-source.el |  8 +++---
 2 files changed, 56 insertions(+), 21 deletions(-)

diff --git a/doc/misc/auth.texi b/doc/misc/auth.texi
index bfc9b44ab14..978fc8d3fab 100644
--- a/doc/misc/auth.texi
+++ b/doc/misc/auth.texi
@@ -601,15 +601,27 @@ The Unix password store
 @node The macOS keychain store
 @chapter The macOS keychain store
 
-The macOS operating system includes a password store called
-``Keychain''.  To use the keychain as a backend for auth-source, add
-@code{macos-keychain-internet} to the @code{auth-sources} user option.
+The macOS operating system includes a password store called ``Keychain''
+that can store both internet and application (generic) passwords.  The
+keychain can be accessed via the @code{security} command-line utility
+(part of the operating system).
 
-Currently, the backend only supports reading from the keychain, so
-passwords must be stored via the @code{security} command-line utility
-(part of the operating system).  For example, to replace an
-@file{.authinfo} entry such as: @code{host mail.example.com login
-user@@example.com port 587 password s3kr3t!}, use the following command:
+To use the keychain as a backend for auth-source, add one or both of
+@code{macos-keychain-internet} and @code{macos-keychain-generic} to the
+@code{auth-sources} user option.  Here is an example configuration that
+searches both keychains and then falls back to @file{~/.authinfo.gpg}.
+
+@lisp
+(setopt auth-sources '(macos-keychain-internet
+                       macos-keychain-generic
+                       "~/.authinfo.gpg"))
+@end lisp
+
+Currently, the backend does not support adding passwords to the
+keychain, so passwords must be added via the @code{security} command.
+For example, to replace an @file{.authinfo} entry such as: @code{host
+mail.example.com login user@@example.com port 587 password s3kr3t!}
+using the internet keychain, use the following command:
 
 @example
 security add-internet-password -s mail.example.com \
@@ -627,31 +639,54 @@ The macOS keychain store
                                      :port 587))
 @end lisp
 
+If you want to store a password in the generic keychain, use the
+following command:
+
+@example
+security add-generic-password -l mail.example.com \
+  -a user@@example.com -w
+@end example
+
+Evaluating the following form will retrieve the password:
+
+@lisp
+(let ((auth-sources '(macos-keychain-generic))
+       (auth-source-do-cache nil))
+    (auth-source-pick-first-password :label "mail.example.com"
+                                     :user "user@@example.com"))
+@end lisp
+
+
 The following table lists the auth-source query parameters and the
 corresponding options for the underlying @code{security
-find-internet-password} call.  The same parameters are used to create a
-password entry.
+find-internet-password} and @code{security find-generic-password} calls.
+The same parameters are used to create a password entry.
 
 @table @code
 
 @item :user
-@code{-a}
+For both backends: @code{-a}
 
 @item :host
-@code{-s}
+For the internet backend: @code{-s}
+
+For the generic backend: @code{-c} (restricted to four characters)
 
 @item :port
-When given an integer: @code{-P}
+For the internet backend, when given an integer: @code{-P}
+
+For the internet backend, when given a string: @code{-r} (restricted to
+four characters)
 
-Otherwise: @code{-r}; note that the argument is shortened to four
-characters as required by the @code{security} tool.
+For the generic backend: @code{-s}
 
 @item :label
-@code{-l}
+For both backends: @code{-l}
 
 Note: when creating a password entry without specifying a label, the
 @code{security} tool will set the label value to be the same as the host
-(@code{-s}) parameter.
+(@code{-s}) parameter for internet passwords, and to the value of the
+service name (@code{-s}) parameter for generic passwords.
 
 @end table
 
diff --git a/lisp/auth-source.el b/lisp/auth-source.el
index ec48ab31580..e988fa5afee 100644
--- a/lisp/auth-source.el
+++ b/lisp/auth-source.el
@@ -2080,13 +2080,13 @@ auth-source-macos-keychain-search
 generic macOS Keychain:
 
  (let ((auth-sources \\='(macos-keychain-generic)))
-    (auth-source-search :max 1)
+    (auth-source-search :max 1))
 
 Here's another that looks for the first item in the internet
 macOS Keychain collection whose label is `gnus':
 
  (let ((auth-sources \\='(macos-keychain-internet)))
-    (auth-source-search :max 1 :label \"gnus\")
+    (auth-source-search :max 1 :label \"gnus\"))
 
 And this one looks for the first item in the internet keychain
 entries for git.gnus.org:
@@ -2160,9 +2160,9 @@ auth-source--decode-octal-string
                      collect var))
      'utf-8)))
 
-(cl-defun auth-source-macos-keychain-search-items (coll _type _max
+(cl-defun auth-source-macos-keychain-search-items (coll type _max
                                                         host port user
-                                                   &key label type
+                                                   &key label
                                                    &allow-other-keys)
   (let* ((keychain-generic (eq type 'macos-keychain-generic))
          (args `(,(if keychain-generic
-- 
2.56.0


--=-=-=--




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#81976; Package emacs. Full text available.

Message received at 81976 <at> debbugs.gnu.org:


Received: (at 81976) by debbugs.gnu.org; 4 Oct 2026 09:25:03 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sun Oct 04 05:25:02 2026
Received: from localhost ([127.0.0.1]:50946 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1xDISm-000845-59
	for submit <at> debbugs.gnu.org; Sun, 04 Oct 2026 05:25:02 -0400
Received: from mout.gmx.net ([212.227.17.21]:36301)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.84_2) (envelope-from <michael.albinus@HIDDEN>)
 id 1xDISd-00082n-0o
 for 81976 <at> debbugs.gnu.org; Sun, 04 Oct 2026 05:24:52 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmx.de;
 s=s31663417; t=1791105880; x=1791710680; i=michael.albinus@HIDDEN;
 bh=FuHpHj8IL3HrcaDHXYmIrbwZ19ZPYINNOlLGiLXtHOs=;
 h=X-UI-Sender-Class:From:To:Cc:Subject:In-Reply-To:References:Date:
 Message-ID:MIME-Version:Content-Type:cc:content-transfer-encoding:
 content-type:date:from:message-id:mime-version:reply-to:subject:
 to;
 b=BY2B8IyKVlUYCCh0K45MArCAMPdpEovksoMGRO1uwURIN8+gVSFK+HneQPtp4jVt
 S17uLRnAidy4RdQtE1CSK0SPyEWx87x97eJoh/YPYFn8s6XoFA6SToKSs03VqYP5x
 wmVcIyU7PNebJZ9H/3dsmhg96pR8wo/IJ79m7HbrUCgl105dmlIYNVyYIYWXaGId/
 Q8atLNuiqDA8PI9vEZtM3xtDI7D1VtvTq8laIdU0gFjdGSQuTvK0WVCt+QGOzUMOj
 MoJ7wCDjoqVqmNeEsJWl7yAayHgDOpX8ULx5x2XwfBwVwP93GauNCI0DZXIP2lqer
 NoeJUkosKaHnQyAmhg==
X-UI-Sender-Class: 724b4f7f-cbec-4199-ad4e-598c01a50d3a
Received: from client.hidden.invalid by mail.gmx.net (mrgmx105
 [212.227.17.168]) with ESMTPSA (Nemesis) id 1MnakX-1woRuH1krV-00cZBm; Sun, 04
 Oct 2026 11:24:40 +0200
From: Michael Albinus <michael.albinus@HIDDEN>
To: Rudolf Schlatte <rudi@HIDDEN>
Subject: Re: bug#81976: [PATCH] Reactivate auth backend macos-keychain-generic
In-Reply-To: <871pa7t2r9.fsf@HIDDEN>
References: <m1mrsw16we.fsf@HIDDEN>
 <871pa7t2r9.fsf@HIDDEN>
Date: Sun, 04 Oct 2026 11:24:39 +0200
Message-ID: <87se2lstrc.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13)
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="=-=-="
X-Provags-ID: V03:K1:LS6FJcI/WBvrYnREkFx9himPoaT45o6E9WOHn/WxXJJVhdfL9VQ
 1MsgSrn07ZpGI/vnhFPZzZ53asAKC4s4cCvzBuVuudx86ezd8pQtAwDsHkZS1PPxMNX0cax
 yFn+fK9EOZXdhYPgdvR89FzlIy5Vk90+ZxHwq0W0lpGDXCYN7pWuXBV1fFM/0iC6/zAJi6j
 f9SZWHHlfkEwXimjrl2Qw==
X-Spam-Flag: NO
UI-OutboundReport: notjunk:1;M01:P0:77GaqEUVn1Y=;urgslTnVBrHATkOewLMJvsQvAS4
 cm8MWlNDkiggAiF2xPUr0ujyDE1ZN5Il2hBkPj/Yu1PWkptD6sdFS8bssCOqrq4P6MLGufqu0
 oXTpURQyFa9PICWzlb6cW40jmoobI56ZP99JzOo7AmmLFO0YdJOL/xecInHNnr3+WvfUe9q8+
 EGVFWDlMpwb4cmUGaBGHLJ3aV/l9ACxR3ACcaIscHIyHe2tpTeAj7SQ8Dpx97+syPw8r9Zp/u
 CnGmmMldBKD9+lDcOx7wgGL4o0A7c+Fcx1DFiCx+jnzuq1+lwB6OdbSZyThDYgdA5dqYKkISZ
 uKisHdC0tzv9qy2PVYzwH1ro1eeGHEQqV6ZvodT67MqAIaFrnmh2ZPNwSKEQJdGmHv5T6weW/
 AAwQpFwH7KlNHupDkNgdAmGrCCRzf6Pft1SJVUWWxdSBTQ8sUZE4TUOafPXoMapg5d57W/fqd
 QBvi5EjVf/VqZPDv9qa8FjcFnta4z/emUZ8b7J7PgUYiZWtr23aeycFJw/CiW8PqQWVT3mqRy
 LpE9AqPxl5pF6HtW8pNov1yzV5sNx/VazHHkIEMyM+Yn0mY4ruJ0N5O9ZhzcsfM35I1fNKVCj
 TEatw6Fmm/XjucVPFBadj7cvY1k7GHEl4ifmjrg6EuscqtmMJbn/YO02W2eGSQ3s/JcsY5+Z3
 zDUSjUGveAWaZuGfTn0LLyoI6d5CIg4NoiaBrJbFAURlkuOGFlk8TDmgSmRRhOXoxMWm4/oit
 gyB9cJS5btUjJGcweKrvCKQNnD9T4uSVlHWq/eg1s/NDCPqmUMntXr0UsZXFfqYRpVgX1dVJh
 bTzJPPDd4oTSs1W+GtUtNySfOCbqHRFNQBOkufRstJFWiS6+CWtX4/hBz5XX4QQxMQ81ZnI5z
 YKRmZEIwPCXghIenK1VoKmx69lyd+/INR1eL1LuPJHLYaLEs+iVSnfm8F16reu47duGa4iP3G
 ShQCzuU0Cx+wNaJCO9Wf5GJUlt3txOniRbLnjciDiiCU8IWzQhOlUEf3xqnMoZo02b34EtH4W
 Cq8RhynjvsqDp9zbtSkQd1iQJ2GNNLpYyr1+5wix78lHzdXCVy5qew3xO+MafWAJl9f5+AomJ
 Snybz4j7+Lq2kTKDUHPME1yF4x/xl8tvBiVUHVompqH5YUmle2/WioNGJCdrJFHc99qT8BYsG
 Rr/4VAoNShQfKUWpsU4WqAvhvGaAObVxF28m3RCrhdgmwl4QpQL40RA6TNg7sd6fqYqY1kvMf
 ccwRhGXONIwoZQmHLp4uZph4b4njQSFpNGRK/dj/J2kQHkwyPDpJ8UFhNMqYCBjGpgRvuxabF
 DIn2qWeVA9LyXAHKJyHROjOUYmZ5si29RadXBvwiVE/B8JvTVxZjtF9ntBums7ctcLbzmgI3R
 lnn6vZZBwynLITCKiO8zrblggyqI0wQc9sCjeTTND0cA995COrfomvLQg3oAxxhxMIxSHh3DA
 1rly8xRZBKG64hlQQpML03p1qd3lW9soCgIJWzBD9+3x6z+WwgdwrEGqSz6d/NGICWTBz/Kiy
 GM2OAzm74CZZcuL6KQNMC62qfg5HhViP20EoP6NE5TLvf0jDujCVACRRxR+browWGZG+NZKvy
 IWmhehRHPNXfCq955G1yNfednJNJmczQF6CxsYtL/LxpvaQBXrLwqUL0BVeOCCms3sPZUv9Xc
 5Ka21/cGkq6pql2sn/FEiL35pi1bzKKQUtRqy5Z3lePzK4AOSReV076zjs7XaZ2ELlICkzhQ/
 2o6WodT2zyYS1nPC1RPNNBWSvPhtZV9q3bzGmWI9flYj/SoFAa34V4++iMn3zW0RklIdDqRRJ
 LlBnHyQQ8VmoY85ZuFzTrcPMJKa/O4/otMsrgfSFcSr5akkIX1UfWbTyPTC+VOTL8Km4Qt1WR
 eOgfHEq1+ivTzV3gCWYY+kDi63z2rLMeclOqrMVEmFg0VSVp/yNUCDn3NA4oTv7PlvG+YkHRv
 a+uKxg7Y3SH8U+aofnXb41SHjCDLea5ll0TC/XqRh4JrB8JeR1o1NIzjo3X0sa466wUxn0MAr
 6bvSdQztg/CFANMArO4NBlXUKrnHkZVjpngWmSot1PN74swwbpc0c3jJ5J/gYJdLLhD6WoKbC
 PzDKiNxHw3ofZn9SFR4K0we7moNiw+hqxwrxQLfxqJ3tlvz2ZO+DZ5zp9S02Sx6JfKeVnR0ez
 LsVw7nKUv4OxjThZprbCy2gaXFwvDzOOF0eGUvts6viSWsBDOHhm2PpNzfGoEBjbWwF6UQEZF
 con6EB0kwd7Lg2F9GN0uS09q8f11gVVXjGwkc2kKE7JbL0fNQwpCBhotrIpxBrZl4gnRsU+ZL
 cbZdFkun6Bgnqgapp9fh3ze5dFP/Cu3clwNuPody+5DDJKpSMGh2Ri0Cfu4ObZkzWNkkiu92d
 8i4+IY5iLOhBDzLiDUv2QIKrqQZWJKsq82UTWQuQZHpFZ0lqk5ywpsymivsXuO0hwc22f6pv1
 pM/iWtkp+93eiazatnArXnfTjNlY66WU8t7T6eH612DRCBfd6MuGeGSs/oQmFVDqguDcBJHNY
 aDYVPu4zbDdkOE/OF4Iax2UHkAbzc6f6WNYhqFLXcNwTaToc6/mE1e9hDicT/eSlugWAjtOZG
 XG1M6sS3OcCtyAwDNbSXCev51JHObHmiDpHeHaZI2xZhKFNx6Y4C4MFy9D1p73SjT6Gv4fyLD
 OddfFNnbidgXSr9GSIJapZODyoPb28G0fHEtwCjxBypCcbGiFJhb32twxRe8SXL7bFd9jE+PD
 c90Mq+AU/nmKeBWXVvXpM1iCGcER7HoIjZa/9D3cMGyrn0sbAheaH9tdTNxqU1OcJ2M0YaMd/
 srWSS19iUwdK1UkO4D/2CuHoYIhBo0PPTfDBN2Jr9dpjNO1WRwRC28aIlxURntkZI6proOv/Z
 4XdRW+FHNxfYD4VETdsxR2a0ETdYvoFPTAlxhi2BjOMKmVgTukd9U9fRRi2IPF1lkpyndkei6
 v4eQrX3lp/bdX5h5v49dhc4WyoMBs2Qf3MITT1Og7ca1EZH2BPM61tXfq8gVndHjNUVPI9GhB
 6CkY6gToYMVoKkzzqg2ZjQbdQAt389BToJmqtrPYGTOh26dQzjX6I6zUSTIgQTmsnVSYvA99J
 4pcGeQ/Yzdo5e58Xh09GJuXjTxFle5nKZlf96y8V01TpV6yypLHc1IZTu44HJHxcdzfmzfqpf
 ftRkbsUd3I+rZEKFUZo6ZDaaW8YiWJXCz23JbdAMVoAOd91SePtdDpCbWLjJkQp6VR1eT8nu8
 t81RT4pwnrbXA7p0qyYrqWXohwnKgJUv5j8cnthJ46xIJbsUxoD0fdffVq9D0KyGQamcvcZr6
 t0QhUlouKVvjmSsAlLHViY5dvyiqHpEACLiUiwTYOh/g7wACynZri0t/P1kdflkjx4WI+auzk
 j9ybPHkkLrU6Ghw1P3uzPIU96y4FEvNeFtI0499AZUmfRGD9hycnLCF7vqdG3lTpcoLygOQ8a
 HSViAMKDAfg2K2BbL+1baqPFVcwiassnvOQQzUFfrKDxpGt2HNTONnQYK64dztDHtzYnth3UY
 YGbjErf+L4Yh6xsSiA0xWzelFytOwFRJMOWqfwvWHzilrEq/D/CqkynKWP5jewElh8FTUhBb3
 2ltkxKWYn+AkFwKIeGuvjlhyWN3xdFZEEV9jA/+rLqsOzaPj2Gicixp3dZvMl06JEP+sBJKJ6
 Vr02Btuv10qiVtzlwTa5X80ZqJVxIlfJaud8eIItnfcQh2+Wzlvklvbc66ET8p0Cp50Ol8DK7
 oywnu5gi4HCqihl9qDP31wl2tyqjofwSgWk9Jl9D6te27l48nve82xuewaTnSOJhS+FUlTujv
 vTx/QCHnYhPPy3eclhl0rM/zQ+rmqFlpb9Nu4cuuNwqIiMhUri08S2NqXOK5AD+cn326GTZL2
 HwIukJXOCWp385MfVwFrKZhp4BoNeLRweSUGeM5pH0FG3a7rVD9lA9hPr9CTWNM0hpV2fN9h9
 BVdhKaDqGVRHfSb3egf+eptdm7MAuXgGsD9Mzo1TZzYdCpTaftPb7B5SmbTnVvmXso5Uk1UQR
 0b0uBih1Wvuq5q6NpetyAgJ2LWSLR75Sjbc0SX+6gyDvF22IZfJxRQVg8SOojBNLVnICsG2dT
 ItSJzgk0+i5tuwWFi5JyqM2JpO2KO4gpEfK30qDUy+JzI8n1qNcmwMJ34Hvxw+DM0/s4kYVnE
 Wxuaj+SSc1+miepVencacJ/gAAw+ohUqprvTxriVgRBxmCmW1Z5h//V3Jkn0AvgmOitwnV+o5
 qIsh5qMC6clDe1qA/JbA3A74SjgQ1R55+X/EyrYy2hJ4eqXPrq4MTx/Vf81+EZLG5c5+653gr
 2MW383yejYRnuqn3hf09y69VFrEbs4+6OHohnMxHWNhojcR79avPDoKKZ29N5dA3lsYwLXYyG
 etb78lqzryxKxaHxUlZTYCWjgjRzFAcgTSx+v8YpzPDl9+nAx2Z+xvURy+I6LreETi55RpuEG
 t9cD14PqpsLjjDLvctjSng78ofMOynqd7vrmGzI7+169sxW/Ly09rb0dn6w5AYPgLLlnT9CPT
 ivpFmvpwq3o4wmCLsAewuUV5vQ1R2TEx7D0LqwFSbgWCVzABflhpt2S0tgBeTtDLyraUfIjpR
 xKaW7YNyQgdLqtNcYABdYESSXNQqBZ37+iOU9jmY9bviDjI1iN/lO8BDNypfNcjFWPThkpCiY
 FqkOo0cK9AQUxGeQ2zCfGKzOnLVVfUfUw4Hz+7f/lWDVk76+YNKOob8Vf0OPdfJJU+iXBFfde
 GF3fPRVRriouyyZbbI7BIMcU9cUFyUygmQ9xUVgNwckhQPQx2/6BQuELo0goojgbTtPhU0ubn
 qdFPi/mx6WZv89t13J/qWOaVres4bJ4nr6l5qfPTeXb0VwyaG4sjXpsLI//GWkJhnthqnJPcr
 zP4w0XczmLIVHWpUS9Jy/K2MYjjzboOrEPHTmVue2tzw2yv9uMuQBwbEUXG7tSe9vyPNQVzTz
 0id6u7VwCt3S2llriqYk8NjeazJb1hHrr58Y9oTR0WshtFZKP5iPI+klFQcJFs9c+JyDDa1Xy
 4GCjf8OBRy8U0Pyyj5r1BkkWN3XOBwipFns8gxhAk0lZIGuexBtQAXxHXF0rpfYAAI7jjDFaK
 RYFsv3dqa2af1wzALG9cJqIEqWlWRoFJnkfDAyj2fp+vxKG8zg82kgdKr9PTlc/xQ1++y3L/e
 KkgkwH5Lu/h10itX7+n5SEhnjRtrPzUfgGA9Clx/ZGuZIazHxE0Z3RFT5CTOc5rWbALI5f9kA
 1nToEexHsLhnAMcmBzJjFRvXArA+Fn/5+RJ2rSIIZVcU6H+nuAZSgixmL4J2ZPKH4WrVcbfHd
 +zHdta35qNlPoLw0R3mZ3XmmN2bEsF3ALWPExs26XnmCqtq3mQ/5jExfRdKvh2cHwhg+tukVg
 uUT2ZRNuhAtVzCmxfOnsopEzW04SaJ7Sevh/XRYg5grDRRjRqbB8gXShDNlJMMwwK81zZoUcq
 7CJf3KTS9206xJYvZqE7D28mFxRlnBtpEHnKUdPQbNw28LB4NvKVEqQS5+4a37THka/Wzex/5
 B0RfRnJB5rJApogtE6Cr/DlFFYiUDnwwUHsu3PqNVbB41iGV1lLvX8pRSQdoxLTIGy7GVERmY
 u2aLeTl/IGnvxS3sbWNXAXaCyTtfWVgTRQ9RiE4GoAd/rzMkWMoZIrAWUKGfcqokFvmT7dw6f
 vJz1bDMzQS7+Vyo9PQ+9Vo5uPgv3ka+tHj9vDWQhNd4i8jbzJTrJBxSO6tJbJ2Bh47wceF12F
 S6haTrBL4u8NMIhogzFJL0QFxAymQCRA+HRl9rxsxkN4qMhLhrW5MDPicC7USRzUS6rhdO3c4
 aoslS6JtFR/NOCxWcx7ZOhtpnqjj3RYCuquirpCWX+hPhXDSG8JbVzh/spUO9BRjC6NEqeCRj
 d44R3R8/vnu9ZVjoSfAFPCX/11XtCHWS2NwNnn9O6VtRkKv6x1+95SPJC0h6fstV9QAFBi0MQ
 vW22ivQKhwCl4a2yIDtglbERGZNJrYKMNgIeX7F/PywgcswTTSfBonz+gh6PRaTid/eSS0t70
 5B6BgyO0eWSreBPrX0HYFTjf9aTYiCPXXYWWnbDqZF7daZfUrtarT7Gi4ncJGFNW+rMPC1enz
 XHnpgrzDm8KdgSkaa3L7MDA6Yz71LsBaG+VN6XSkBAo7hVtNfNdlnPRRQFH/cq4qlOrZWrI2J
 oNZEntt7j+Dz1jevl2Cbojz5vk9rzP5QqxGScXz6MwgDp2Y1Ekv7tQYZz/bcR4ghttBWyiqfC
 a5NoCzvZfyTygrxDaiId2ZpJ6zZIOJ1Sb1PRrcwqC8rjszsu2kBiV0EsJ36usWCz0zUDPO9Sp
 ZYQmfQezaVL1ysLIs25PRoVmWO2OlIWv7o004Y4dRQe70k7tcYDkUdKafHmE/xMzDBBo/DBWp
 sELJ+pYeIPDSLBeCb0E3qvWso9o5kBmEpdxhj5qojlZ6H83VBLK26PxLSuc9dqTcMX5uJHK2s
 ltRW2a/1PbCJhgen7Mbr3XKtezuCbyF8sc1eJkRmnh4WtqViJASRMroql8d8Q5aAniwXno/c3
 8ZojzWhfPmx5GOz8bb+24eJL0pJ6A=
X-Spam-Score: -0.7 (/)
X-Debbugs-Envelope-To: 81976
Cc: 81976 <at> debbugs.gnu.org, Ted Zlatanov <tzz@HIDDEN>
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

--=-=-=
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Michael Albinus <michael.albinus@HIDDEN> writes:

Hi Rudi,

I've played a little bit with your changes to auth-source.el for
macOS. Since I have no macOS machine, I've replaced the final
call-process in auth-source-macos-keychain-search-items with (message "%S" =
args)

It looks we are safe when modifying auth-source-ignored-keys to our
needs. Testing this, I've fixed also the handling of :label. See my
patch below.

Here are the tests I have applied with my proposed patch:

--8<---------------cut here---------------start------------->8---
(let ((auth-sources '(macos-keychain-internet))
      (auth-source-do-cache nil))
  (auth-source-pick-first-password
   :host "mail.example.com"
   :user "user@HIDDEN"
   :port 587))
=E2=8A=A3 ("find-internet-password" "-g" "-s" "mail.example.com" "-a" "user=
@example.com" "-P" "587")

(let ((auth-sources '(macos-keychain-generic))
      (auth-source-do-cache nil))
  (auth-source-pick-first-password
   :label "mail.example.com"
   :user "user@HIDDEN"))
=E2=8A=A3 ("find-generic-password" "-g" "-l" "mail.example.com" "-a" "user@=
example.com")
--8<---------------cut here---------------end--------------->8---

I've also tested to use another keychain but the default one:

--8<---------------cut here---------------start------------->8---
(let ((auth-sources '("macos-keychain-internet:foobar"))
      (auth-source-do-cache nil))
  (auth-source-pick-first-password
   :host "mail.example.com"
   :user "user@HIDDEN"
   :port 587))
(let ((auth-sources '((:source (:macos-keychain-internet foobar))))
      (auth-source-do-cache nil))
  (auth-source-pick-first-password
   :host "mail.example.com"
   :user "user@HIDDEN"
   :port 587))
=E2=8A=A3 ("find-internet-password" "-g" "-s" "mail.example.com" "-a" "user=
@example.com" "-P" "587" "foobar")
--8<---------------cut here---------------end--------------->8---

--8<---------------cut here---------------start------------->8---
(let ((auth-sources '("macos-keychain-generic:foobar"))
      (auth-source-do-cache nil))
  (auth-source-pick-first-password
   :label "mail.example.com"
   :user "user@HIDDEN"))
(let ((auth-sources '((:source (:macos-keychain-generic foobar))))
      (auth-source-do-cache nil))
  (auth-source-pick-first-password
   :label "mail.example.com"
   :user "user@HIDDEN"))
("find-generic-password" "-g" "-l" "mail.example.com" "-a" "user@HIDDEN=
m" "foobar")
--8<---------------cut here---------------end--------------->8---

Does this make sense? Could you document the specification of a keychain
in the docstring and the manual?

>> Best regards,
>>
>> Rudi

Best regards, Michael.


--=-=-=
Content-Type: text/x-patch
Content-Disposition: attachment
Content-Transfer-Encoding: quoted-printable

diff --git a/lisp/auth-source.el b/lisp/auth-source.el
index ec48ab31580..8b49aaef6c2 100644
=2D-- a/lisp/auth-source.el
+++ b/lisp/auth-source.el
@@ -2105,6 +2105,8 @@ auth-source-macos-keychain-search
          (max (or max 5000))     ; sanity check: default to stop at 5K
          (auth-source-ignored-keys
           (seq-union auth-source-ignored-keys '(:host :port)))
+         (auth-source-ignored-keys
+          (seq-difference auth-source-ignored-keys '(:label)))
          ;; Extract host, port and user from spec
          (hosts (plist-get spec :host))
          (hosts (if (consp hosts) hosts `(,hosts)))
@@ -2160,9 +2162,9 @@ auth-source--decode-octal-string
                      collect var))
      'utf-8)))
=20
-(cl-defun auth-source-macos-keychain-search-items (coll _type _max
+(cl-defun auth-source-macos-keychain-search-items (coll type _max
                                                         host port user
-                                                   &key label type
+                                                   &key label
                                                    &allow-other-keys)
   (let* ((keychain-generic (eq type 'macos-keychain-generic))
          (args `(,(if keychain-generic
@@ -2171,7 +2173,8 @@ auth-source-macos-keychain-search-items
                  "-g"))
          (ret (list :type type)))
     (when label
-      (setq args (append args (list "-l" label))))
+      (dolist (l (if (atom label) (list label) label))
+        (setq args (append args (list "-l" l)))))
     (when host
       (setq args (append args (list (if keychain-generic "-c" "-s") host)=
)))
     (when user

--=-=-=--




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#81976; Package emacs. Full text available.

Message received at 81976 <at> debbugs.gnu.org:


Received: (at 81976) by debbugs.gnu.org; 3 Oct 2026 11:58:29 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sat Oct 03 07:58:28 2026
Received: from localhost ([127.0.0.1]:58699 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1xCyNi-0004yi-O6
	for submit <at> debbugs.gnu.org; Sat, 03 Oct 2026 07:58:28 -0400
Received: from mout.gmx.net ([212.227.15.15]:60489)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.84_2) (envelope-from <michael.albinus@HIDDEN>)
 id 1xCyNZ-0004xd-5l
 for 81976 <at> debbugs.gnu.org; Sat, 03 Oct 2026 07:58:19 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmx.de;
 s=s31663417; t=1791028683; x=1791633483; i=michael.albinus@HIDDEN;
 bh=H069R3O1oRCLqHQLrclu5P6kdmzGbwRYXWBhz6RW4hM=;
 h=X-UI-Sender-Class:From:To:Cc:Subject:In-Reply-To:References:Date:
 Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:cc:
 content-transfer-encoding:content-type:date:from:message-id:
 mime-version:reply-to:subject:to;
 b=X56nqRkU3GYAgI22e95O2ThCxoh71ScGXt0qZyL1xtTBKL8x6RisXN004V2UdJvh
 2FiORNqgh6CMGE3leoOTimXnb8r0J4K1AXCkqDI0hfoCHIH4w6C/Zqt9jcMzf5OKU
 lh52ZhvJqI34mmghTHhtvqeAqHG13TGhPHsN+tRYXLuc9C83629JPU7fHk0vimIeO
 lnpbU97ALuPtRnkBk67L0+Co982K/f+7Fsm8n7Sad60RMO7lb1Y6iEB8RgupgiyGR
 NZIcbSwCJ289CJ8zRRNoBSm5QlZR+ZbRj7z2nxKQVmFj/wi3JNBRHjQxAOx8L4eEQ
 hx5UixWxjhaYgw4D2g==
X-UI-Sender-Class: 724b4f7f-cbec-4199-ad4e-598c01a50d3a
Received: from client.hidden.invalid by mail.gmx.net (mrgmx005
 [212.227.17.190]) with ESMTPSA (Nemesis) id 1MatRZ-1wgecy1OLT-00aG2B; Sat, 03
 Oct 2026 13:58:03 +0200
From: Michael Albinus <michael.albinus@HIDDEN>
To: Rudolf Schlatte <rudi@HIDDEN>
Subject: Re: bug#81976: [PATCH] Reactivate auth backend macos-keychain-generic
In-Reply-To: <m1mrsw16we.fsf@HIDDEN>
References: <m1mrsw16we.fsf@HIDDEN>
Date: Sat, 03 Oct 2026 13:58:02 +0200
Message-ID: <871pa7t2r9.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13)
MIME-Version: 1.0
Content-Type: text/plain
X-Provags-ID: V03:K1:NUpns61zvAPlodNWEUmA/0Ivo4pY+3FqF5KDSutNvWBU6AnXP3Q
 /a3GBovt9NMAs5T3GvEsQGzFZugGBUKAhEuq25rcKHa5i0ah8ODiN0wtV7aJAG9fO007cRy
 L05riY6fDIjO33PaUi32od+8/jRZMARZUqNNhONTY7l9BQMWz5LPWUhfYvMcst2PUyoqUmR
 LU//NX1OzhjLgqDhRuY7Q==
X-Spam-Flag: NO
UI-OutboundReport: notjunk:1;M01:P0:M0+9B08jjpc=;KVW0UBEOq0p5VqKKaQHqj+5cxGd
 OLDBTFDoDKEA5d++VNqK66qPDIc5BkDOkOkgHcYFBY0n9mwZFfvcO6tJibDvLdtdNwpnrhDYL
 uc92Igs7vlHV9AZ5lZl/cnyXNET/5/26u30GVAYEdjtM0gWAjr2pHw64WH3IEcdwDNZgLBjjg
 SnVcoIryR/kKs+e/XMgGmRPY+f77aBAFJuQs6PVMJpx4HpD4KD8kCToSfdifn/BEd7fm9bhXP
 v8RVtWV7F+5iE2AMrtl7kRiNk+ifCaN0rxuAZM9PWXi0h6I+dskLr17AmkoaFEOMYb2sqWyWo
 woZKygYTG0xXW3RV2aVN8GochGobUEZP7sHGVjeBqSu14xw5Z+Mhq3wFkt9gHEEmTwIK45c7W
 cICrZmeFApvgsV1Pcm9EOTuvLs+Gv2CT2g022oefIPuCNuba0QWKkwcVNNIRF6DB7Ivz3OF0t
 Fvnn9I7L39Rl8HMi9KOVUvrLDrZHHGpC3seWUb1y4PCAQ0oTWc8wy9rY8e/mh4BkaXeYA8f6o
 zAtkRPWd9Mhqg0GaK1G6+PTmc//ymIMHj2r+OJMa+zp9m1wRrj+glh6q92WFXq0FDAd1GO6Ab
 +C+4hJQyR6outIwdXOee/aD4l4ltcPG4mmmIsnnCKkXYnf38niEkKDA8pcHrvPfN9TyZioRoH
 B+B/r0HImqWM5ZOpelIZ6NCVfSTxk/e6IDJIAUHw9CSBojU4Y+Zzb0ZUc5fznBhAagYLPqtTR
 X4u0+TJlSUiXrwIXRhLVcy5Y1qoNw1X26nTvXHKpX2w/gekS5QDj76WDTtnjNshFf6rli1sj0
 GFjv5FKxGlzfB49ANUyWr2zeihDqcm+rNbhW8qyUDdPOkHV5/nYJ5pN0/dnFRjcuCKZ+IRT0x
 H85F0K1Mqf8IKXNqemVXiGAtoNrC5LVFXJrXkZDPInbxYDkK0eAF8ToeW8GBzuz+eMZxTMdAh
 Ajno1UznLZSHgDCTJxQ07VFcYhlrkaMJovJTqDHczHVH+td8kSV6q+mNtSFg7oBx13tp0Rwc+
 cLW7fA4P5YTvz/3ztbVTW5EEAjwCaIqdXllR3yKTh/8PLtCauPGdldi2cBcSbEBb1LKz3deuP
 DPV0bPjM8saz2lqKo2Aj++zdTvmEC1mMV8GE2PFLeEZLfvBxCMsg77jo7y5/5ZLBGvs06gfyX
 fqS02V17LJz6jFd79bkksMSas7YH71TYjQ/igeigjpKWvlwkT3IXoZsnCMOHkog6jOa4Cdedz
 rppwn8x8j9BMevUjfKNK/mUVJKGYXGJo5B3cuLd9p3srlHFd1X/4ykzBYTAVLovjgwza1oVHa
 5pmunUeFfAycx2bcJ1TIo6sXaeg/kLweSuQ2h/4rEzHSifriT0o8fhiH574KrzosWdJ9QgKep
 UtQEVzxaa2ez/Kd2GRmoFsqJU1OuZOC9IVevf6B9p22j/1EbS6Ad2Bvmx/BNeg+RzX3I9jyK+
 bcgTkvfUbQ5tjOmOjOQkONnESY2EUkgaAVBv+NtQ14nlMqWDkwyIc2hVbknPkOrpct3neegBr
 X0KSGG8sUauRqbYQqTmgf6LXl3869+jG++bHm4BcD3XrlqeNnSXlF2r4MfDNX/40qY3O4mK1j
 ueP3yP+ZPQlaaA1qoXGIkgqH+HeCuJ2WI5TjWdyoQJiODxoQeHIjnm05fwqPGjGK6KI+Ol5TE
 xIhV2JMbCxIsJps31zUxkz9PDqXPWEfVMsFNUAW59AuFapa/lgOTGxJqS2MjZ7laLnGgsJDg+
 czBG5qV9e300aGmAnW53WPtfiseiDo1LrukKjrLCMJAmSpig8oUroEyY93/Q0PqIgCIDtECtM
 2KiyPXPf5lxOwDHWqc2P13tUtW2I3KwjIKhUnkhIO4GthQNRcuzSJo0L51sKAYsY3DJnYKfH8
 BbNXaq5qEPOG3G6gB7PLAnAy7vh7YSSFBppGzqk6vQqR3tEkP2fNEELbZ69w9OUcC88TFIvVY
 iPBv+F7y8S95W3+5+yASXg8w6bkdrGJslLtmPUdlbmrDDSkk9RpEZNzeH+znP9r4aYvclLKrC
 9MODIMLRJH21fquH/14jM8mrTB+EsSMknRbJEqaQVRAq1Mwf3NC/Xb4rcEMYEu36fhbznZtSJ
 cEq7/zaN0v35sChFXTIBDsqRTrr1F/JnJIDMaPAsDYnxh+78C9Vj465ybHh1iizv+QrDx5Kdr
 E7F37/m6ptluGoutQnMQevUoAW7LVgApjEJ3Ly1KbfNxL+avdp9PNmuS5IWDvlFSn+lvChI0D
 mGenHKA3X2M0VoBIncy6RFWqMfoo57A7mhgUpLy5b3GIofALB80tO5MfOXg2H2Udo+guzx9Kf
 V5/QGj2n/fPvme+rlHbyud3SnbBtDJhNyeVpwZzgrA/w01yUe2ALmJOuOBkYsY0MwfJ85DE7W
 5XcCRa6Vy/Gx8tyWMgj+yeXrsu5hy2JJeMgIreExxzoN831mY9hU020BzhuGzImewyNtBvGdh
 1L7lqzlHLAJnwiR9PJwPP3iVfm8TP3vQI90d4LyzoXeOhyPK7AYzzS/u/3S+HYbMd/B2Znamd
 fKhUYD3ntmh1qQh1jm4tETdJ6E3ul8HqXHW2Vsi7aEzKmlJ1uZx42jWzSlD7C/+Ueaf4c12P6
 NIxi7wNzq8xMicRlfpkG+kG0VOn0iQsKxXURREuAJrvNvow7y3zGo712pp2gwwAYldu6tNqr1
 zcWjsEyTwBap3Ck3VkSBSiO53oX4x78SzeRuwL8HCif0YVNkPg0L78DkuhFdZreDDAb7XnSyy
 loxZhT8wuUhW92qCvH86fg0hrISG1ZN2+i4XYWmPo8kYEHTNi4lp9eEePAhuPB7ALYg1HLYNr
 KPp0wsp0m1S2Lvy6r95bWyTVR4CBwe5S97jpzi5BePoa2Veov72d37zvonsx++1bFesz8C0mR
 oPfVDE4ve101Gm0yBi5B10+tPtsvdyHst5FQPOhU4CbD/2Z9JLf1C8omtUEykDQOc5SvQ2M+3
 pYv87KJBsdkwKu06NMokKwdHegrM79Y2D+9aKKO1xNQyZb8TfwSfq/zQ/YZ4SO/IjaDTPyEa3
 FhVE8WMm2QQFQLArzEkiNqlDxcKoXDKSmlSujY1g1gKm6Z2HwrVxzchAUmJBmkNp4awh6Pkix
 B8k8DRM1XXXmd8jWQeU//5Pu4ALf/ipQHOtwbKZiwRo8MJ8JfAwRnRxX7aYda8oGwXjwxWuE+
 3Osh4Xwj4rek75OJY1b+MotKRKOxdaCGjRkbwMsUz/m3plblxzXYQqRwnbiue9t4h6NEXjHk9
 2G9IwrZcAUySrA448jRPCGOa/cCOHollNWqm/4bZwxawPP6DOaPyltQNvF+c+3g5N+4qTO1tg
 rrao3sauyXT/TEeP1u8sFmK8PbEtBGJ5Fo1oS/5YNV2eEkVplkJOIdSQMoAXWvQr+6hVNQ+dO
 fu9z74ixUTMU36QIYrNiFAE9SLL+IiTEFUlMEJhkwBcCG7Il9ctpDc0IBCzPub4Ahjt+NcVDO
 jOGbl3/MW+/t14q6Hc79RNSqEnGkpdpOkOtfJitlAvma9/9QS91BuyBuX/M5Bj9W8IIof1Yos
 1uu3JNa8Oo2fkvFx/cvIVmSJLQBfVakG5Yr0voj8GCoChFR2R/qi0vIH1SVU2rDx6ebGDs14T
 JKOJAt1MKmcI3D//i9u7HW23xiM1+LNNNDUSVr5t/rXrdKVkNNli3UnVbY6j7GiHALcUkNqjs
 7K9hgqzt/x64H5NE8mCZHtkhWoD+GT7StQqJVysJWKsCFGrFhr6SpkdKXcjl0jMfusBKRcmas
 gEX+G3pkmCa2R4yE3RcDAcbqYaz9BuIFbIH+JqNNnelAwzegVHOm7h8luAe+L8HSQLp4h5n1W
 97G+NM9Hzh+JRsvGhn/dA/jRslNoBa0LyK61ARicMJ1yb/STMKNYBdBRoT0jpeic3TLsV1iwX
 HHK/aLa13bzngL42DS0qUyLm8BTOuwdOR20O0m+Ul/g0Yf+yfSzZ5SZ33D2sz8aXCkWSQYRDH
 8iMbbNt3ddUePISoz5G3vTCrLK6+uROX4SVUkD6vql5faDKz+d68Op3O+9IbFwBtR2XTRQ8jU
 QFLMj2BD/gJqYgZYttPLyYJIRIVUgEBH5doTjUqI+hmaHjhIbJLe80WyzqWG9bfdJPkELAGpk
 IsXKtXHY/z8qSIjYHRV2wn2gXuAs+8Ldj3fam14rNrc4UAXj1sSejrKzzLRdspP6VNgrQm/PY
 ji6unYESu1/rP01RwcwLaFjvAc0hz1+PfVcLSbCdRnaTvCPM1mHjAyPNIvG004TYj5a1bCzhp
 2ovpmLzbfe3fihEBuAHU1ce2tEZLhE7rObwQg9XfUv1HT+oQvQuzHcA89CAjn75/Nfn4H2YOA
 ZGkq8OoOXcXg7lmJ64qVGequ6xXNKEBElLfBilJH6J+aHbFywqLzL44gukqPC+1btNAvr5eAo
 l5kxqIfQGXaQg2ZNbVksm7wBiLz7e2qR8784FaWAhhKfFiyedH06Za/V26aniaImqzwMJgvu1
 S1OwG6itANTbbjO38cuAIBimftpv813bpc/z9hgqD2uWLZ2r6kNIeSao8JWQrtVYPnd71y76S
 VbnDeu2IbOsNMz6uLWJtt0A5qjZnmTly0Xp8reTPjZ6lbX0hprv/+JfPaYWxYrXXC08RUPQfO
 QZUpCavI2FlDfqponu2BMD3B1Ee6rDWVKlWCyJPXZYuqGShNuyO9qB+QzGGMDgEn4Um+eyixA
 0hlyW1Qam/9jGaohiULVh4dSgQ8dnCXK4/I7xd9tVkFvFP+KgktT4M9XQqoAo/cbMkd/x1GJF
 Hp6/9HBM5V5eeZVYUu4XooUz5+/XvvSZMw8k4EqVFyQhFVcPtPiqllZCrYfO1JVz3EEbQlGlA
 uREI1ertlCXDG/XfIIP5z3bH8YpFgPtz6zDc6CtHMdHNMGou+8xouCAUhETtpY6lw/bjlcGyM
 ZWUFOTfySOOLH0wxX/FwxXfZo6zjTT/11rJwEFAQJlgDm1PAZ9W2Ri1mEkut14ev7pK+W7C6r
 aEIdh3IDsSpTR6C3XlDojCYkngs8/V2eI7CXKDbs09r1voiD4pGKMixuFMAAs3c3MTSpU8B/l
 D+lMpCq803x6F1kwGL+kB7yw//lPBBFMTd02O8oXgsXp+jrRHaQPbzs4zLGQArPJqn9Rh5Pyn
 IYhF2ijJt4JOIIvrwg7bFP9AWYfM2ejll9oex1grw5DvYyFHsJJVAgLQd9PgQ/DunFW2IzGqE
 zcNeyLJwnFk6HAaL+s4n1V54bOA9PP2ruli/694fU4ebVEO97dck1MlQBNkDdT9gUjHGIQ66X
 YmixMhQtBNwzR1c2IZuHIVx1kKUcW0N7+FyM8OgiU0BqkIcsRBJcbH+2i3QUuTqYQtyz923Uz
 ZB3WPs60P57sd9h56XJJedXQwh8yakWv/rcvGaSCeGngRBvO/a3fRfBTyCe6JN27vKkRnHWiM
 a+uYJ8096ijCJOot9CeQC0TwV2r5TMEqwdZa/WH1JwRRGOPtC9CDaeg5Y4bvFf3EriUcGWec9
 wDi95ym4E+QxH4jGXKiQcdaMlhyl0zgGElqD01cA01FEGKFNk/doilcqkW04yv+clCx0HP9c7
 GzDxEJgW43EJWpfRigD2er9+hs+in+pH6RZTrVbhlgVeOKnanT550wsoWXeWiAUbXLAV/m05G
 0CL4cJ19SljSrtbTYatWHSeTm+CgF1hGeWs0lw/tbljpsI/ybWxF793a7DWhD11WqlsQR3BUM
 UsfpYiXA89kkGFioVOXESJosp6OCGlJPExXGfzDHRFlQfCCHpTZebfTD/b4fNZLyYYuyGpOWv
 dzZjx01HxI8D+BfoZ1CRpfHPcaqQL9I39mjGtxjByfRxCXB6c4stKJ0fEJLKqzuQMfdd2D7Dg
 A3LOL/2U0R6VzwSFnHWmxb2HLMNn94fBAVwCJlvscVy69ytlZF2m06BVzlPHDmucfZ6NxiZ29
 GYNwt1atEDPAN5wWwiKHnyxQM8BSjK2B38Jei4yuAPFRJgygwPeHH4K+07Af+Y5x73eb2dtnm
 2//0SHFJes9XiIvulFd412oKwvK8ar9qV5tS5mwmsLDdRDQDWyre98C6Da7L/Y/ocIGjJZ2pR
 y8HUapWUt7kXQx+yNM5zHMEalTWuNqVxPMFecPpTfD8vVfMazmmiHM3PyVcVsLC6UdTvSL4h9
 4SyE8i1InOsiebRjQ1WBMDXNwilJ0Q9RNgzps+LnR46rh/hL08Lq7n4PYL5uoYpyZMrLl8GPB
 lATvJ9oCe06LC6iwZ37CsU0V4hoZ6PJbQM/E5GvzUSaYTuqKly0kNMB6EjLwk5o6d7ZLxDlN+
 TUhM/yfFpQkeJEPQFC1hXaLwNsror89AjePj6wPkixkAQ4X2Q0vYPyzlvlsI/btaDaLaFPh/G
 vNIgWSL3U2V545rHbkXK3GEZLweFKpq84Fux58qEggu3hvENR6/3n+W+qxpLMMHSoyBxNGmSh
 XZXIk/oOHgNWbVZamQE4lHitMuDBKY7NW5+z4D7od9wPxmQ=
Content-Transfer-Encoding: quoted-printable
X-Spam-Score: -0.7 (/)
X-Debbugs-Envelope-To: 81976
Cc: 81976 <at> debbugs.gnu.org, Ted Zlatanov <tzz@HIDDEN>
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

Rudolf Schlatte <rudi@HIDDEN> writes:

> Hi,

Hi Rudi,

> This patch reactivates the macos-keychain-generic auth-source backend
> and adds some documentation.

Thanks!

> The generic keychain does not natively support all fields auth-source
> wants (host, port), so I added a recommendation to use
> macos-keychain-internet to the manual -- the internet password keychain
> is well-suited for storing the information that auth-source wants to
> query.

I don't know whether we need an explicit recommendation for
macos-keychain-internet. macos-keychain-generic has its use cases, for
example WLAN passwords, where you don't need the host or port field.

> To leave things as-is for existing users of the generic backend, I left
> the code that calculates keychain queries alone, even though the
> "creator code" keychain field that we use for hostname is restricted to
> four characters.  A from-scratch implementation would probably choose
> different fields in the auth-source <-> generic-password mapping.

Perhaps. But OTOH, the -a argument is used for both
macos-keychain-internet and maacos-keychain-generic, mapped via the
:user field. So it is consistent I believe.

Some comments on the code:

> +The macOS operating system includes a password store called ``Keychain'=
'
> +that can store both internet and application (generic) passwords.  To
> +use the keychain as a backend for auth-source, add one or both of
> +@code{macos-keychain-internet} and @code{macos-keychain-generic} to the
> +@code{auth-sources} user option.  The internet keychain is more suitabl=
e
> +for typical uses of auth-source that involve user, host and port names,
> +since the generic keychain does not include all of these attributes in
> +its data model.

"all of these" is wrong; user name is included. Perhaps say this explicitl=
y.

> +Currently, the backend does not support adding passwords to the
> +keychain, so passwords must be added via the @code{security}
> +command-line utility (part of the operating system).

Right. But an implementation of a :create function would be
appreciated. This is subject of another feature request, I guess.

> +@lisp
> +(let ((auth-sources '(macos-keychain-generic))
> +       (auth-source-do-cache nil))
> +    (auth-source-pick-first-password :label "mail.example.com"
> +                                     :user "user@HIDDEN"))
> +@end lisp

"user@@example.com"

> @@ -2162,14 +2162,14 @@ auth-source--decode-octal-string
> =20
>  (cl-defun auth-source-macos-keychain-search-items (coll _type _max
>                                                          host port user
> -                                                   &key label type
> +                                                   &key label
>                                                     &allow-other-keys)
> -  (let* ((keychain-generic (eq type 'macos-keychain-generic))
> +  (let* ((keychain-generic (eq _type 'macos-keychain-generic))
>           (args `(,(if keychain-generic
>                        "find-generic-password"
>                      "find-internet-password")
>                   "-g"))
> -         (ret (list :type type)))
> +         (ret (list :type _type)))
>      (when label
>        (setq args (append args (list "-l" label))))
>      (when host

So you remove the key :type, OK. But pls use replace _type with type
then, for the reason explained the other message.

> Best regards,
>
> Rudi

Best regards, Michael.




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#81976; Package emacs. Full text available.

Message received at submit <at> debbugs.gnu.org:


Received: (at submit) by debbugs.gnu.org; 2 Oct 2026 15:04:39 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Fri Oct 02 11:04:38 2026
Received: from localhost ([127.0.0.1]:33825 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1xCeoG-0003pw-OQ
	for submit <at> debbugs.gnu.org; Fri, 02 Oct 2026 11:04:37 -0400
Received: from lists1p.gnu.org ([2001:470:142::17]:47750)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.84_2) (envelope-from <rudi@HIDDEN>)
 id 1xCeo2-0003o8-V6
 for submit <at> debbugs.gnu.org; Fri, 02 Oct 2026 11:04:23 -0400
Received: from eggs.gnu.org ([2001:470:142:3::10])
 by lists1p.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <rudi@HIDDEN>)
 id 1xCenj-0004Xv-85
 for bug-gnu-emacs@HIDDEN; Fri, 02 Oct 2026 11:03:55 -0400
Received: from fhigh-b8-smtp.messagingengine.com ([202.12.124.159])
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <rudi@HIDDEN>)
 id 1xCeng-0005DL-Hw
 for bug-gnu-emacs@HIDDEN; Fri, 02 Oct 2026 11:03:54 -0400
Received: from phl-compute-10.internal (phl-compute-10.internal [10.202.2.50])
 by mailfhigh.stl.internal (Postfix) with ESMTP id C38587A0071
 for <bug-gnu-emacs@HIDDEN>; Fri,  2 Oct 2026 11:03:48 -0400 (EDT)
Received: from phl-frontend-04 ([10.202.2.163])
 by phl-compute-10.internal (MEProxy); Fri, 02 Oct 2026 11:03:48 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=constantly.at;
 h=cc:content-type:content-type:date:date:from:from:in-reply-to
 :message-id:mime-version:reply-to:subject:subject:to:to; s=fm2;
 t=1790953428; x=1791039828; bh=zjlWXXaPCeYrOvRFPbL51yXDqgT+qyZW
 spjuymaDd+s=; b=UDL+CbqJeKE61g14HC/2ZrShW/FnkX4a1nivES/8eJTXjn2c
 Tj69H/dS0c2Kyux92Z9KxLz8yzaUFXLeXHTsRfoyZbJLgndkUh0kuClr/mNx2urb
 LBkV6Ev8/964FgnkoUxEQWzdLVdJ1zF8Y67jk5oBCg23V9MOEtHm6GM8tQt9sSeD
 YeAx41tcyjdnxC5eHQLnu//1QsmbBe2ldp6nsIe0xtoMnM147s7QQcsUARfEI8uN
 iQlKnBVQcQ0UZUEm/MG1YkaYjK8S1Ar4bYRHbO238Y6DKuOFZ4T/xmx7AHtLFeER
 A2y5GknCx690npkqjYUuei0SJdRX9driyLTEcw==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:content-type:content-type:date:date
 :feedback-id:feedback-id:from:from:in-reply-to:message-id
 :mime-version:reply-to:subject:subject:to:to:x-me-proxy
 :x-me-sender:x-me-sender:x-sasl-enc; s=fm1; t=1790953428; x=
 1791039828; bh=zjlWXXaPCeYrOvRFPbL51yXDqgT+qyZWspjuymaDd+s=; b=v
 UQt4gj+bvTqpu8cbH34N+loVnZ2yvHrZwE3wLfKTFTRcG+a+YNP3G6HccpYIheze
 K4qv4vm8xZI3SG/PdwkGSJvmRBU2TRbTKH7WGJeCTh93Wn+Dba/O/0q+LqTyiaje
 AEvotF3WsDIao6BaYRK3XjILTr0p8F1KLOaHEhz7yebjUe945nV26g/rLba3jhH0
 MVzsmBUOgtCWO8brNh9QJYeJDGL7hqVLTSm7o7AmakZA+8bCUeoLn14XWLCbM6Sw
 0UsCu8YQ42li1lMUQhvarzAZm3TbJ0m4+I0ZwEGhS/FNgdDOOaBHMPredtQfTf75
 QzYWVeOpjMlyf2vqpXUjQ==
X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-06;
 repo=github.com/dkim2wg/interop; date=2026-09-30; sw=lmtpprox;
 action=sign d=constantly.at a=rsa-sha256;
DKIM2-Signature: i=1; m=1; t=1790953428; d=constantly.at;
 mf=PHJ1ZGlAY29uc3RhbnRseS5hdD4=;
 rt=PGJ1Zy1nbnUtZW1hY3NAZ251Lm9yZz4=;
 s=fm2:rsa-sha256:SVuRxzUJ8D+4TI45V44bHSky+LM/wJXAvNYOx1uuniT8bxg
 RLUOuapLiphbpBcOZrjLhQjKg46DwCbw63QBxYdCV7TgXDCrPrU1KiRyOTXI4er0
 cULO5HZVS3QOCPY4FXFpx9Dl4YXqruw1gJq2P7mOPzV+oi/dV6KMg+s7/pVX5RjO
 PqqzrAqSZTDP4UGh9hprRjibJcbDz4hB4M/j0uMMFPi0mTGeMKefTA5KUohrUKkv
 QSDk2W4/qzq75dyCmI3W5wxgvFjIBI5sAzeq1/rLx5WUkdMrJLDEN83K4mDTtOqS
 riInj2P5huPmnZe7gqSWwJ3rhzcku2tAhifmpkA==;
X-DKIM2-Info: draft=ietf-dkim-dkim2-spec-06;
 repo=github.com/dkim2wg/interop; date=2026-09-30; sw=lmtpprox;
 action=mi-m=1; hc=8;
 hn=content-type,date,feedback-id,from,message-id,mime-version,
 subject,to;
Message-Instance: m=1;
 h=sha256:hAF/EU7XOKe0Yw4tE3U4DppnAPs7YWl+B9JFHDFFj2o=:BhiY7m0XqHdrK0NbtVnQa1unj1GJ//k2rXTfpZfU0BU=;
X-ME-Sender: <xms:1Me_auV-0D0dqgkmNqcgzqz6tr7sg6bu9YgZFzrGYmkIxT_tME0Lbg>
 <xme:1Me_agdXgaebZRKOBcq3dOStdBR1Tl-ApR2hpR7ub2Xb-stAcQv42tCrdzSSRnexA
 _4DOo45mes-YJp7vhwYPV8rrkhu1C0VJigMNDFVmkhmLd_3r0OeTXE>
X-ME-Received: <xmr:1Me_atckZ9vmxPY0EavHdQ0klKJzvjxmI9Dc_zK81UebYPoGAeDKwWNTDdWyJGNsuGpAZVkD-GfUFzyVx7J_mdmQQIdzDPfiJIvbJHJ9QhwvwVjRvdiAuwtSLOlhtER6wn-erw>
X-ME-Proxy-Cause: dmFkZTEIvnLjiek7OJsWozcRi3vn1tD0UdjBXNgKdHAzsyfRVn7h4lAHUwuEfJNM1Ou/3/
 LEc5nVGZUg7zNqQE/hR1mk18phFEJXXGf2XnUkF+STRg4XDkP4ZTteJrQ7NkPdV1JMmM3W
 Dr/TxgfEVGI/c+fwQ7ePeIC3lYOCzXHhbaICl7Al2Sz5LX+fmAfcMoRQb3yZOxt7yOLUQL
 r38oZh5jgskT9JE7lFXky5bgRw69dPpoPcGWXvsMcyrmQ/Hefji2L0NsIJDBBUsdLodPIm
 PDyb6Pi+ADOz/BhWZ0O1aUNyxKqoByZdeX8o48kEBZhwFxNabVp2tAwv7zMpzV0QtK7BC7
 Dm2R3bzr1mmWfaaih5byzonb7U8y7CS8zoIAuct2ILThb4jm5GPnn1krB75CXgKLKEKzvk
 3XfcVS07BnyO/FswO/ZkzXdMCxRRodV2+EBvJfltbZyb/2k5NjKJ5ME6VvauSGqzJh3TQB
 0v0zt84+3pb2JHRgb1ugK7GjBHvR/wsfvTVh3TFG50Adxm+2nLHUC5n2y5VAtrzfe8zisa
 NwKtCVbrz/OWxIOYaJWyRY/Vs41b33fRcLQqcr66VOZ1Q0iDoLzdBM6XjHZS7ReIXJY4ll
 7agcI8hejKtdVsZYQqBKZ5YY502vQsGmro7MxOJJSRn8fZf2F4nM86MzCcFw
X-ME-Proxy: <xmx:1Me_aiLu1yTW4nhZt2wWRDalf11oTNgrPgxZPUXLJnJC3HBGA8oYdQ>
 <xmx:1Me_asJbXS_RvHNZ4UlZ7BZl2AWKM0PARvwN-B82a_Fs4iQqCRTdZg>
 <xmx:1Me_asHefUZfDY-J5B2A6d0mo_WX15LaBlJDgALBj7-xKgV7PKkpPA>
 <xmx:1Me_apkzynLhl2dv0gE4l8UMuhDMTCZd-HMsQoThpYpcOcXZ8zE63w>
 <xmx:1Me_aiUnXUDLTlQK3N5phQiFRUHu8HMGSMbOowltie6y2QmDYVUpZGQa>
Feedback-ID: i5b4840b3:Fastmail
Received: by mail.messagingengine.com (Postfix) with ESMTPA for
 <bug-gnu-emacs@HIDDEN>; Fri, 2 Oct 2026 11:03:47 -0400 (EDT)
From: Rudolf Schlatte <rudi@HIDDEN>
To: bug-gnu-emacs@HIDDEN
Subject: [PATCH] Reactivate auth backend macos-keychain-generic
X-Debbugs-Cc: Ted Zlatanov <tzz@HIDDEN>
Date: Fri, 02 Oct 2026 17:03:45 +0200
Message-ID: <m1mrsw16we.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="=-=-="
Received-SPF: pass client-ip=202.12.124.159; envelope-from=rudi@HIDDEN;
 helo=fhigh-b8-smtp.messagingengine.com
X-Spam_score_int: -20
X-Spam_score: -2.1
X-Spam_bar: --
X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
 DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_PASS=-0.001,
 SPF_PASS=-0.001 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: 0.7 (/)
X-Debbugs-Envelope-To: submit
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.3 (/)

--=-=-=
Content-Type: text/plain

Tags: patch

Hi,

This patch reactivates the macos-keychain-generic auth-source backend
and adds some documentation.

The generic keychain does not natively support all fields auth-source
wants (host, port), so I added a recommendation to use
macos-keychain-internet to the manual -- the internet password keychain
is well-suited for storing the information that auth-source wants to
query.

To leave things as-is for existing users of the generic backend, I left
the code that calculates keychain queries alone, even though the
"creator code" keychain field that we use for hostname is restricted to
four characters.  A from-scratch implementation would probably choose
different fields in the auth-source <-> generic-password mapping.

Best regards,

Rudi


--=-=-=
Content-Type: text/x-patch
Content-Disposition: attachment;
 filename=0001-Reactivate-auth-backend-macos-keychain-generic.patch

From 141d458b48a16265dfc88ad8924e1c8b24cc6486 Mon Sep 17 00:00:00 2001
From: Rudolf Schlatte <rudi@HIDDEN>
Date: Fri, 2 Oct 2026 15:57:32 +0200
Subject: [PATCH] Reactivate auth backend macos-keychain-generic

* lisp/auth-source.el (auth-source-macos-keychain-search-items): use
'_type' argument instead of ':type' to decide which backend to search,
since 'auth-source-macos-keychain-search' removes ':type' via
'auth-source-search-spec' before calling this function.
(auth-source-macos-keychain-search): fix docstring.

* doc/misc/auth.texi (The macOS keychain store): add documentation.
---
 doc/misc/auth.texi  | 65 ++++++++++++++++++++++++++++++++-------------
 lisp/auth-source.el | 10 +++----
 2 files changed, 52 insertions(+), 23 deletions(-)

diff --git a/doc/misc/auth.texi b/doc/misc/auth.texi
index bfc9b44ab14..f2a8f6b5c81 100644
--- a/doc/misc/auth.texi
+++ b/doc/misc/auth.texi
@@ -601,15 +601,21 @@ The Unix password store
 @node The macOS keychain store
 @chapter The macOS keychain store
 
-The macOS operating system includes a password store called
-``Keychain''.  To use the keychain as a backend for auth-source, add
-@code{macos-keychain-internet} to the @code{auth-sources} user option.
-
-Currently, the backend only supports reading from the keychain, so
-passwords must be stored via the @code{security} command-line utility
-(part of the operating system).  For example, to replace an
-@file{.authinfo} entry such as: @code{host mail.example.com login
-user@@example.com port 587 password s3kr3t!}, use the following command:
+The macOS operating system includes a password store called ``Keychain''
+that can store both internet and application (generic) passwords.  To
+use the keychain as a backend for auth-source, add one or both of
+@code{macos-keychain-internet} and @code{macos-keychain-generic} to the
+@code{auth-sources} user option.  The internet keychain is more suitable
+for typical uses of auth-source that involve user, host and port names,
+since the generic keychain does not include all of these attributes in
+its data model.
+
+Currently, the backend does not support adding passwords to the
+keychain, so passwords must be added via the @code{security}
+command-line utility (part of the operating system).  For example, to
+replace an @file{.authinfo} entry such as: @code{host mail.example.com
+login user@@example.com port 587 password s3kr3t!} using the internet
+keychain, use the following command:
 
 @example
 security add-internet-password -s mail.example.com \
@@ -627,31 +633,54 @@ The macOS keychain store
                                      :port 587))
 @end lisp
 
+If you want to store a password in the generic keychain, use the
+following command:
+
+@example
+security add-generic-password -l mail.example.com \
+  -a user@@example.com -w
+@end example
+
+Evaluating the following form will retrieve the password:
+
+@lisp
+(let ((auth-sources '(macos-keychain-generic))
+       (auth-source-do-cache nil))
+    (auth-source-pick-first-password :label "mail.example.com"
+                                     :user "user@HIDDEN"))
+@end lisp
+
+
 The following table lists the auth-source query parameters and the
 corresponding options for the underlying @code{security
-find-internet-password} call.  The same parameters are used to create a
-password entry.
+find-internet-password} and @code{security find-generic-password} calls.
+The same parameters are used to create a password entry.
 
 @table @code
 
 @item :user
-@code{-a}
+For both backends: @code{-a}
 
 @item :host
-@code{-s}
+For the internet backend: @code{-s}
+
+For the generic backend: @code{-c} (restricted to four characters)
 
 @item :port
-When given an integer: @code{-P}
+For the internet backend, when given an integer: @code{-P}
+
+For the internet backend, when given a string: @code{-r} (restricted to
+four characters)
 
-Otherwise: @code{-r}; note that the argument is shortened to four
-characters as required by the @code{security} tool.
+For the generic backend: @code{-s}
 
 @item :label
-@code{-l}
+For both backends: @code{-l}
 
 Note: when creating a password entry without specifying a label, the
 @code{security} tool will set the label value to be the same as the host
-(@code{-s}) parameter.
+(@code{-s}) parameter for internet passwords, and to the value of the
+service name (@code{-s}) parameter for generic passwords.
 
 @end table
 
diff --git a/lisp/auth-source.el b/lisp/auth-source.el
index ec48ab31580..7d6b1c9024f 100644
--- a/lisp/auth-source.el
+++ b/lisp/auth-source.el
@@ -2080,13 +2080,13 @@ auth-source-macos-keychain-search
 generic macOS Keychain:
 
  (let ((auth-sources \\='(macos-keychain-generic)))
-    (auth-source-search :max 1)
+    (auth-source-search :max 1))
 
 Here's another that looks for the first item in the internet
 macOS Keychain collection whose label is `gnus':
 
  (let ((auth-sources \\='(macos-keychain-internet)))
-    (auth-source-search :max 1 :label \"gnus\")
+    (auth-source-search :max 1 :label \"gnus\"))
 
 And this one looks for the first item in the internet keychain
 entries for git.gnus.org:
@@ -2162,14 +2162,14 @@ auth-source--decode-octal-string
 
 (cl-defun auth-source-macos-keychain-search-items (coll _type _max
                                                         host port user
-                                                   &key label type
+                                                   &key label
                                                    &allow-other-keys)
-  (let* ((keychain-generic (eq type 'macos-keychain-generic))
+  (let* ((keychain-generic (eq _type 'macos-keychain-generic))
          (args `(,(if keychain-generic
                       "find-generic-password"
                     "find-internet-password")
                  "-g"))
-         (ret (list :type type)))
+         (ret (list :type _type)))
     (when label
       (setq args (append args (list "-l" label))))
     (when host
-- 
2.56.0


--=-=-=--




Acknowledgement sent to Rudolf Schlatte <rudi@HIDDEN>:
New bug report received and forwarded. Copy sent to tzz@HIDDEN, bug-gnu-emacs@HIDDEN. Full text available.
Report forwarded to tzz@HIDDEN, bug-gnu-emacs@HIDDEN:
bug#81976; Package emacs. Full text available.
Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.
Last modified: Wed, 7 Oct 2026 11:30:08 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.