diff options
| author | Stanislav Laznicka <slaznick@redhat.com> | 2016-12-06 09:05:42 +0100 |
|---|---|---|
| committer | Martin Basti <mbasti@redhat.com> | 2017-01-06 09:26:56 +0100 |
| commit | 8db5b277a079fdfe5efbd7d49311f14489cee0e8 (patch) | |
| tree | e70fd61ab3bb90151ebc6d05761cf8f8d50ac9e7 /ipaserver/install/server/replicainstall.py | |
| parent | be7865bf4f9b6774a17f31380e96b76d0473f982 (diff) | |
| download | freeipa-8db5b277a079fdfe5efbd7d49311f14489cee0e8.tar.gz freeipa-8db5b277a079fdfe5efbd7d49311f14489cee0e8.tar.xz freeipa-8db5b277a079fdfe5efbd7d49311f14489cee0e8.zip | |
Unify password generation across FreeIPA
Also had to recalculate entropy of the passwords as originally,
probability of generating each character was 1/256, however the
default probability of each character in the ipa_generate_password
is 1/95 (1/94 for first and last character).
https://fedorahosted.org/freeipa/ticket/5695
Reviewed-By: Martin Basti <mbasti@redhat.com>
Reviewed-By: Petr Spacek <pspacek@redhat.com>
Diffstat (limited to 'ipaserver/install/server/replicainstall.py')
| -rw-r--r-- | ipaserver/install/server/replicainstall.py | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/ipaserver/install/server/replicainstall.py b/ipaserver/install/server/replicainstall.py index 6e986f7d9..212616908 100644 --- a/ipaserver/install/server/replicainstall.py +++ b/ipaserver/install/server/replicainstall.py @@ -45,7 +45,6 @@ from ipaserver.install.replication import ( ReplicationManager, replica_conn_check) import SSSDConfig from subprocess import CalledProcessError -from binascii import hexlify if six.PY3: unicode = str @@ -1303,7 +1302,7 @@ def install(installer): if conn.isconnected(): conn.disconnect() os.environ['KRB5CCNAME'] = ccache - config.dirman_password = hexlify(ipautil.ipa_generate_password()) + config.dirman_password = ipautil.ipa_generate_password() # FIXME: allow to use passed in certs instead if ca_enabled: |