From 72e315c9362e2831a0a425bb7651ddc419cf5e97 Mon Sep 17 00:00:00 2001 From: Jr Aquino Date: Mon, 14 Feb 2011 12:00:49 -0800 Subject: Bugfix for ipa-client-install echo's password in cleartext to stdout https://fedorahosted.org/freeipa/ticket/959 --- ipa-client/ipa-install/ipa-client-install | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) (limited to 'ipa-client/ipa-install/ipa-client-install') diff --git a/ipa-client/ipa-install/ipa-client-install b/ipa-client/ipa-install/ipa-client-install index d69a10383..20c327d49 100755 --- a/ipa-client/ipa-install/ipa-client-install +++ b/ipa-client/ipa-install/ipa-client-install @@ -658,8 +658,10 @@ def main(): stdin = options.password else: if not options.unattended: - print "Password for %s: " % principal, - sys.stdout.flush() + stdin = getpass.getpass("Password for %s: " % principal) + if not stdin: + sys.exit("Password must be provided for %s. " % + principal) else: if sys.stdin.isatty(): sys.exit("Password must be provided in non-interactive mode.\nThis can be done via echo password | ipa-client-install ... or\nwith the -w option.") -- cgit