ipa-server-install w/o password on command line?

[Dominik Vogt]

We want to generate the initial passwords at random.  Is there a
non-interactive method of telling ipa-server-install the passwords
(-a and -p options) that does not require putting them on the
command line?  An environment variable would be fine, but
passwords must not be visible in the process list (ps -efa) and
must never be stored in files unencrypted.

Ciao

Dominik ^_^  ^_^

--

Dominik Vogt

[Rafael Jeffman]

On Thu, Mar 25, 2021 at 6:53 AM Dominik Vogt via FreeIPA-users <
freeipa-users(a)lists.fedorahosted.org&gt; wrote:
>  We want to generate the initial passwords at random.  Is there a
>  non-interactive method of telling ipa-server-install the passwords
>  (-a and -p options) that does not require putting them on the
>  command line?  An environment variable would be fine, but
>  passwords must not be visible in the process list (ps -efa) and
>  must never be stored in files unencrypted.
>  
You may use ansible-freeipa (https://github.com/freeipa/ansible-freeipa)
along with Ansible Vault.

Rafael

>  Ciao
>
>  Dominik ^_^  ^_^
>
>  --
>
>  Dominik Vogt
>  _______________________________________________
>  FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
>  To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
>  Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>  List Guidelines:
> https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
https://lists.fedorahosted.org/archives/list/[e-mail]...
>  Do not reply to spam on the list, report it:
https://pagure.io/fedora-infrastructure



--
Rafael Guterres Jeffman
Senior Software Engineer
FreeIPA - Red Hat

[Russell Jones]

Use a bash script to do so.  ipa-server-install ..... -p ${PASSWD}

On Thu, Mar 25, 2021 at 4:49 AM Dominik Vogt via FreeIPA-users <
freeipa-users(a)lists.fedorahosted.org&gt; wrote:

>  We want to generate the initial passwords at random.  Is there a
>  non-interactive method of telling ipa-server-install the passwords
>  (-a and -p options) that does not require putting them on the
>  command line?  An environment variable would be fine, but
>  passwords must not be visible in the process list (ps -efa) and
>  must never be stored in files unencrypted.
>
>  Ciao
>
>  Dominik ^_^  ^_^
>
>  --
>
>  Dominik Vogt
>  _______________________________________________
>  FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
>  To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
>  Fedora Code of Conduct:
>  https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
>  https://lists.fedorahosted.org/archives/list/[e-mail]...
>  Do not reply to spam on the list, report it:
>  https://pagure.io/fedora-infrastructure
>