This ticket was merged from Trac, original URL is http://fedorahosted.org/beaker/ticket/25 Add password field to user profile, to be used as root password on provisioned system. Should work like this: {{{ #!python if password_is_specified_in("Kickstart Metadata"): use_it elif password_is_specified_in(users_profile): use_it else: use_default }}} KS metadata overrides user profile - it is analogical to command line option overriding configuration file. Optionally (controlled by setup option?): if password entered in the field is clear-text, convert it to MD5 hash before saving.
Evan !McNabb wrote: > To take it a step further... make it possible to upload a public ssh key > and have that be used on any of the systems that I install. It would be > nice to not have to type a password at all, especially for systems that > I need to connect to repeatedly. > > -Evan Good idea. Actually I was thinking of using mechanism similar to PAM. BeakerPPAMM - Pluggable PAM Modules ;-) I am not an expert in Web framewroks - is there anything like that? We would need PPAMM to provide methods for: * changing DB structure - add new table or use key_value for users instead of systems * changing User profile form * handling inserts/changes/deletes * changing KS accordingly It seems Beaker (Cobbler) specific.
I would hold off on ssh keys for now, Since we would need to support passwords no matter what since you can't use the key over the serial console.
Basic patch is up on gerrit but bumping until password policy is agreed upon.