#1801 ipa-client-install --password=$PASSWORD will cause /var/log/ipaclient-install.log to contain the password.
Closed: Fixed None Opened 12 years ago by jraquino.

We should obfuscate the password in the log when it is provided at the cli.


JR what platform and version of ipa-client was this on?

Sorry: RHEL 5.7 x86_64, ipa-client-2.0-14.el5_7.1

I'm not able to duplicate this. Looking at the code this is marked as sensitive so it shouldn't be logged anywhere.

Will close as worksforme unless a reproducer can be provided.

Ok, I see it now. It is in the invocation of ipa-join when using a OTP.

Metadata Update from @jraquino:
- Issue assigned to rcritten
- Issue set to the milestone: FreeIPA 2.1.2 (bug fixing)

7 years ago

Login to comment on this ticket.

Metadata