Authenticated Access to Nexus from Yum Doesn't Work

Currently authenticated access from yum to Nexus will not work due to this bug:

https://bugzilla.redhat.com/show_bug.cgi?id=739860


The python-urlgrabber library (which yum depends on) does not support http basic authentication.

You can work around this by applying the patch on the above issue to python-urlgrabber and setting up the yum/repos.d file like this (with credentials embedded into the URL):

[sample_yum_conf] 
name=Nexus Site
baseurl=http://admin:admin123@nexus-host:8081/nexus/content/repositories/releases
username=admin
password=admin123
enabled=1
gpgcheck=0
metadata_expire=30s
autorefresh=1
protect=0
type=rpm-md


But this has a very significant downside. Any yum command which prints the URL's will show the credentials. This likely includes yum commands which can be run by end users.

Consequentially we really can't recommend doing this.

Unfortunately we need to wait for Redhat to fix this issue before authenticated yum repositories will work properly. If you need this feature and you have official Redhat support we would appreciate it if you would request a fix for this. The more people that do this the more likely it is to be addressed.

Have more questions? Submit a request

4 Comments

  • 0
    Avatar
    Stephen Cooper

    Is this fixed in a later release of CentOS?

  • 0
    Avatar
    Rich Seddon

    As I know this has not been fixed.  And the bug in python-urlgrabber (linked in the article) has unfortunately been closed by Red Hat as "WONTFIX".  

  • 0
    Avatar
    Stephen Cooper

    Someone in the comments section of that bug refers to "Simple backport of an upstream fix", so I was hoping that this was resolved in CentOS 7 perhaps.

  • 0
    Avatar
    Peter Lynch

    We are closing this article for comments.

    If you have a support license, please contact us by submitting a support ticket.

    If you do not have a support license, please use our Nexus Users List or our other free support resources.

Article is closed for comments.
Powered by Zendesk