summaryrefslogtreecommitdiffstats
path: root/ipaserver/install/dsinstance.py
diff options
context:
space:
mode:
authorStanislav Laznicka <slaznick@redhat.com>2016-12-06 09:05:42 +0100
committerMartin Basti <mbasti@redhat.com>2017-01-06 09:26:56 +0100
commit8db5b277a079fdfe5efbd7d49311f14489cee0e8 (patch)
treee70fd61ab3bb90151ebc6d05761cf8f8d50ac9e7 /ipaserver/install/dsinstance.py
parentbe7865bf4f9b6774a17f31380e96b76d0473f982 (diff)
downloadfreeipa-8db5b277a079fdfe5efbd7d49311f14489cee0e8.tar.gz
freeipa-8db5b277a079fdfe5efbd7d49311f14489cee0e8.tar.xz
freeipa-8db5b277a079fdfe5efbd7d49311f14489cee0e8.zip
Unify password generation across FreeIPA
Also had to recalculate entropy of the passwords as originally, probability of generating each character was 1/256, however the default probability of each character in the ipa_generate_password is 1/95 (1/94 for first and last character). https://fedorahosted.org/freeipa/ticket/5695 Reviewed-By: Martin Basti <mbasti@redhat.com> Reviewed-By: Petr Spacek <pspacek@redhat.com>
Diffstat (limited to 'ipaserver/install/dsinstance.py')
-rw-r--r--ipaserver/install/dsinstance.py5
1 files changed, 1 insertions, 4 deletions
diff --git a/ipaserver/install/dsinstance.py b/ipaserver/install/dsinstance.py
index a0fdc4ae4..89315b6e8 100644
--- a/ipaserver/install/dsinstance.py
+++ b/ipaserver/install/dsinstance.py
@@ -508,7 +508,7 @@ class DsInstance(service.Service):
idrange_size = None
self.sub_dict = dict(FQDN=self.fqdn, SERVERID=self.serverid,
PASSWORD=self.dm_password,
- RANDOM_PASSWORD=self.generate_random(),
+ RANDOM_PASSWORD=ipautil.ipa_generate_password(),
SUFFIX=self.suffix,
REALM=self.realm, USER=DS_USER,
SERVER_ROOT=server_root, DOMAIN=self.domain,
@@ -775,9 +775,6 @@ class DsInstance(service.Service):
def __add_enrollment_module(self):
self._ldap_mod("enrollment-conf.ldif", self.sub_dict)
- def generate_random(self):
- return ipautil.ipa_generate_password()
-
def __enable_ssl(self):
dirname = config_dirname(self.serverid)
dsdb = certs.CertDB(self.realm, nssdir=dirname, subject_base=self.subject_base)