[Bug 1008289] Re: "Failed to download repository information" for purchased application

[TJ]

This fundamentally affects apt-get causing a failure of 'update'.

When a private repository has been added apt will fail to authenticate
to the server using the details in /etc/apt/auth.conf.

The reason is that the netrc code in apt only allocates 64 bytes for the
user token:

apt-pkg/contrib/netrc.cc::maybe_add_auth()

char login[64] = "";

but the token stored in the /etc/apt/auth.conf "login" entry is, in my
test-case, 167 bytes.

This results in the token being truncated and therefore the
authentication fails.


** Patch added: "Precise debdiff - do not truncate auth login token"
   https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1008289/+attachment/3245093/+files/apt_0.8.16%7Eexp12ubuntu10.3%7Etj.debdiff

** Changed in: apt (Ubuntu)
       Status: In Progress => Triaged

** Changed in: apt (Ubuntu)
     Assignee: TJ (intuitivenipple) => (unassigned)

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to apt in Ubuntu.
https://bugs.launchpad.net/bugs/1008289

Title:
  "Failed to download repository information" for purchased application

Status in Online service used by software center:
  Fix Released
Status in “apt” package in Ubuntu:
  Triaged
Status in “software-center” package in Ubuntu:
  Invalid

Bug description:
  Yesterday I purchased BIT.TRIP RUNNER and I ran into several UX
  problems and bugs:

  1) Credit card payment did not work with a mysterious error such as
  "3DAUTH failed", so I had to pay with PayPal

  2) Once the purchase was done, it wasn't at all obvious what the next
  step was supposed to be. The next day, I figured out that the "Buy"
  button in the Software Center  had now turned into "Install".

  3) After a long long time waiting for the apt indexes to update with
  almost no UI feedback, I got this message:

   Failed to download repository information
   Check your Internet connection.

   W:Failed to fetch https://private-ppa.launchpad.net/commercial-ppa-uploaders/bittriprunner/ubuntu/dists/precise/main/binary-amd64/Packages  The requested URL returned error: 401
   , W:Failed to fetch https://private-ppa.launchpad.net/commercial-ppa- uploaders/bittriprunner/ubuntu/dists/precise/main/binary-i386/Packages  The requested URL returned error: 401
   , E:Some index files failed to download. They have been ignored, or old ones used instead.

  The repository is configured in /etc/apt/sources.list.d like this:

    deb https://private-ppa.launchpad.net/commercial-ppa-
  uploaders/bittriprunner/ubuntu precise main #Added by software-center;
  credentials stored in /etc/apt/auth.conf

  In /etc/apt/auth.conf, I found these lines (oddly, repeated twice):

   machine private-ppa.launchpad.net/commercial-ppa-uploaders/bittriprunner/ubuntu
   login codewiz
   password PASSWORD_EDITED

  If I go to the URL with a browser, I cannot authenticate with the
  provided user and password.

To manage notifications about this bug go to:
https://bugs.launchpad.net/software-center-agent/+bug/1008289/+subscriptions