Hello,

This patch addresses ticket https://fedorahosted.org/freeipa/ticket/4005.

-- 
Regards,

Ana Krivokapic
Associate Software Engineer
FreeIPA team
Red Hat Inc.

From d79edbb9b2224a38636639944ffd9e51d095e920 Mon Sep 17 00:00:00 2001
From: Ana Krivokapic <[email protected]>
Date: Wed, 6 Nov 2013 13:29:09 +0100
Subject: [PATCH] Remove internaldb pasword from password.conf

Remove internaldb pasword from password.conf after switching over to
client certificate authentication. The password is no longer needed.

https://fedorahosted.org/freeipa/ticket/4005
---
 ipaserver/install/cainstance.py | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/ipaserver/install/cainstance.py b/ipaserver/install/cainstance.py
index ac5c81de8c57194160cbfd2fa79c776bf2f39625..db1424c5713e6d87acdc1533684cd8485ec3c13a 100644
--- a/ipaserver/install/cainstance.py
+++ b/ipaserver/install/cainstance.py
@@ -1317,6 +1317,9 @@ def enable_client_auth_to_db(self):
             installutils.set_directive(caconfig,
                  'internaldb.ldapconn.secureConn', 'true', quotes=False,
                  separator='=')
+            # Remove internaldb password as is not needed anymore
+            installutils.set_directive(self.dogtag_constants.PASSWORD_CONF_PATH,
+                                       'internaldb', None)
 
     def uninstall(self):
         if self.is_configured():
-- 
1.8.3.1

_______________________________________________
Freeipa-devel mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/freeipa-devel

Reply via email to