diff options
| author | Endi S. Dewata <edewata@redhat.com> | 2015-08-22 01:14:16 +0200 |
|---|---|---|
| committer | Petr Vobornik <pvoborni@redhat.com> | 2015-08-26 13:49:57 +0200 |
| commit | 8676364ae8260a5894b0b0c2af8e81b10aeaba6b (patch) | |
| tree | b11c14c563f72d73109142f7456266ea71c419b7 /ipaplatform | |
| parent | d7b096486e05defc1de2cc3c9f5582061b8e4060 (diff) | |
| download | freeipa-8676364ae8260a5894b0b0c2af8e81b10aeaba6b.tar.gz freeipa-8676364ae8260a5894b0b0c2af8e81b10aeaba6b.tar.xz freeipa-8676364ae8260a5894b0b0c2af8e81b10aeaba6b.zip | |
Removed clear text passwords from KRA install log.
The ipa-kra-install tool has been modified to use password files
instead of clear text passwords when invoking pki tool such that
the passwords are no longer visible in ipaserver-kra-install.log.
https://fedorahosted.org/freeipa/ticket/5246
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
Diffstat (limited to 'ipaplatform')
| -rw-r--r-- | ipaplatform/base/paths.py | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/ipaplatform/base/paths.py b/ipaplatform/base/paths.py index 0dd3c7fda..5c8f25d6e 100644 --- a/ipaplatform/base/paths.py +++ b/ipaplatform/base/paths.py @@ -343,6 +343,8 @@ class BasePathNamespace(object): SLAPD_INSTANCE_SOCKET_TEMPLATE = "/var/run/slapd-%s.socket" ALL_SLAPD_INSTANCE_SOCKETS = "/var/run/slapd-*.socket" ADMIN_CERT_PATH = '/root/.dogtag/pki-tomcat/ca_admin.cert' + KRA_NSSDB_PASSWORD_FILE = "/root/.dogtag/pki-tomcat/kra/password.conf" + KRA_PKCS12_PASSWORD_FILE = "/root/.dogtag/pki-tomcat/kra/pkcs12_password.conf" ENTROPY_AVAIL = '/proc/sys/kernel/random/entropy_avail' LDIF2DB = '/usr/sbin/ldif2db' DB2LDIF = '/usr/sbin/db2ldif' |