mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-02-25 18:55:28 -06:00
Create default disabled sudo bind user
Read access is denied to the sudo container for unauthenticated users. This shared user can be used to provide authenticated access to the sudo information. https://fedorahosted.org/freeipa/ticket/998
This commit is contained in:
committed by
Rob Crittenden
parent
523eaa9749
commit
1770750b8a
@@ -127,7 +127,7 @@ class Service:
|
||||
fd = None
|
||||
path = ipautil.SHARE_DIR + ldif
|
||||
hostname = installutils.get_fqdn()
|
||||
nologlist=()
|
||||
nologlist=[]
|
||||
|
||||
if sub_dict is not None:
|
||||
txt = ipautil.template_file(path, sub_dict)
|
||||
@@ -136,7 +136,9 @@ class Service:
|
||||
|
||||
# do not log passwords
|
||||
if sub_dict.has_key('PASSWORD'):
|
||||
nologlist = sub_dict['PASSWORD'],
|
||||
nologlist.append(sub_dict['PASSWORD'])
|
||||
if sub_dict.has_key('RANDOM_PASSWORD'):
|
||||
nologlist.append(sub_dict['RANDOM_PASSWORD'])
|
||||
|
||||
if self.dm_password:
|
||||
[pw_fd, pw_name] = tempfile.mkstemp()
|
||||
|
||||
Reference in New Issue
Block a user