Dollar sign escape

pyipmi/session.py

@@ -107,11 +107,18 @@ def set_auth_type_user(self, username, password):
 
     @property
     def auth_username(self):
-        return self._auth_username
+        return self._escape_dollar_sign(self._auth_username)
 
     @property
     def auth_password(self):
-        return self._auth_password
+        return self._escape_dollar_sign(self._auth_password)
+
+    def _escape_dollar_sign(self, password):
+        """Escape string with dollar sign in ipmitool."""
+        # The IPMI command is built and executed in a shell using Popen.
+        # The '$_' combination has its own behavior in shell and it gets
+        # replaced in the string.
+        return password.replace('$', '\\$')
 
     def establish(self):
         if hasattr(self.interface, 'establish_session'):

tests/test_session.py

@@ -0,0 +1,22 @@
+from pyipmi.session import Session
+from subprocess import Popen, PIPE
+
+
+def test_auth_username():
+    username = 'ad$_min'
+    password = 'password'
+    session = Session()
+    session.set_auth_type_user(username, password)
+    child = Popen(f"echo {session.auth_username}", shell=True, stdout=PIPE)
+    output = child.communicate()[0].decode('utf-8').strip()
+    assert output == username
+
+
+def test_auth_password():
+    username = 'admin'
+    password = 'pass$_word'
+    session = Session()
+    session.set_auth_type_user(username, password)
+    child = Popen(f"echo {session.auth_password}", shell=True, stdout=PIPE)
+    output = child.communicate()[0].decode('utf-8').strip()
+    assert output == password