IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

replica install: do not log host OTP

Browse Source 
Do not log the value of the --password option of ipa-client-install when it
is run from ipa-replica-install before replica promotion.

https://fedorahosted.org/freeipa/ticket/6633

Reviewed-By: Martin Basti <mbasti@redhat.com>
Reviewed-By: Abhijeet Kasurde <akasurde@redhat.com>
This commit is contained in:
Jan Cholasta 2017-01-30 10:33:10 +01:00 committed by Martin Basti
parent bd83fdf516
commit 054c1e013a
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
ipaserver/install/server/replicainstall.py
View File

@ -876,6 +876,7 @@ def ensure_enrolled(installer):
args = [paths.IPA_CLIENT_INSTALL, "--unattended", "--no-ntp"]
stdin = None
nolog = []
if installer.domain_name:
args.extend(["--domain", installer.domain_name])
@ -888,6 +889,7 @@ def ensure_enrolled(installer):
if installer.password:
args.extend(["--password", installer.password])
nolog.append(installer.password)
else:
if installer.admin_password:
# Always set principal if password was set explicitly,
@ -908,7 +910,7 @@ def ensure_enrolled(installer):
if installer.mkhomedir:
args.append("--mkhomedir")
ipautil.run(args, stdin=stdin, redirect_output=True)
ipautil.run(args, stdin=stdin, nolog=nolog, redirect_output=True)
print()
except Exception:
raise ScriptError("Configuration of client side components failed!")