Description of problem: If ipa-server-install will for some reason fail, it may result in passwords being logged to the installation log file. Version-Release number of selected component (if applicable): Latest git version: 6119f83799a70738170e19f3e2d833fdf4ecbc86 How reproducible: use ipa-server install and make sure it will fail Steps to Reproduce: 1. 2. 3. Actual results: 2008-05-12 15:18:11,503 CRITICAL Failed to load bootstrap-template.ldif: Command '/usr/bin/ldapmodify -h 127.0.0.1 -xv -D cn=Directory Manager -w aaaaaaaa -f /tmp/tmpn3QE-F' returned non-zero exit status 32 Expected results: 2008-05-12 15:18:11,503 CRITICAL Failed to load bootstrap-template.ldif: Command '/usr/bin/ldapmodify -h 127.0.0.1 -xv -D cn=Directory Manager -w hidden -f /tmp/tmpn3QE-F' returned non-zero exit status 32 Additional info:
Created attachment 305990 [details] Don't pass the DM password on the command-line, use a file
ipa-1-0: 649dcf6c445d99f13151eef4c518635e03d496a5 master: 6c87f831806af51539824244d684c2431b8e7af7
QA Verified on May 22, 2008 (Yi) Build used: May 22, 2008 (x64) test run: 1. yum install ipa-server 2. change the file: /usr/share/ipa/bootstrap-template.ldif to different file 3. ipa-server-install --- result: the install failed, but there is no password logged, test passed 2008-05-22 15:20:27,956 INFO 2008-05-22 15:20:27,957 DEBUG [12/16]: adding default layout 2008-05-22 15:20:27,962 DEBUG [Errno 2] No such file or directory: '/usr/share/ipa/bootstrap-template.ldif' File "/usr/sbin/ipa-server-install", line 556, in ? main() File "/usr/sbin/ipa-server-install", line 482, in main ds.create_instance(ds_user, realm_name, host_name, domain_name, dm_password) File "/usr/lib/python2.4/site-packages/ipaserver/dsinstance.py", line 182, in create_instance self.start_creation("Configuring directory server:") File "/usr/lib/python2.4/site-packages/ipaserver/service.py", line 139, in start_creation method() File "/usr/lib/python2.4/site-packages/ipaserver/dsinstance.py", line 359, in __add_default_layout self.__ldap_mod("bootstrap-template.ldif", self.sub_dict) File "/usr/lib/python2.4/site-packages/ipaserver/dsinstance.py", line 279, in __ldap_mod txt = ipautil.template_file(path, sub_dict)