Petr Viktorin wrote:
`ipautil.run` expects a tuple for its `nolog` argument, but works with
any other iterable (sometimes we use lists as well). Since strings are
also iterable, and yield their characters, this caused every individual
character in the password to be replaced, leading to log messages like:

---
You will be prompXXXXXXXXed for XXXXXXXXhe daXXXXXXXXabase MasXXXXXXXXer
Password.
XXXXXXXXXXXXXXXX is imporXXXXXXXXaXXXXXXXXXXXXXXXX XXXXXXXXhaXXXXXXXX
you NOT FOXXXXXXXXGET XXXXXXXXhis password.
---



The attached patch modifies ipautil.run to ensure nolog is not a bare
string. It also fixes a call in ipaserver/install/krbinstance.py.

ACK, pushed to master and ipa-2-2

rob

_______________________________________________
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel

Reply via email to