From 0176e1a68a5b5fc30cb753d6334ddeca8ce3f8c2 Mon Sep 17 00:00:00 2001 From: Fraser Tweedale Date: Wed, 28 Mar 2018 18:02:08 +1100 Subject: [PATCH] Add commentary about PKI admin password Add a note in cainstance.configure_instance that "admin_password" is the password to be used for the PKI admin account, NOT the IPA admin password. In fact, it is set to the Directory Manager password. This comment would have saved me some time during recent investigation of a replica installation issue. Reviewed-By: Christian Heimes --- ipaserver/install/cainstance.py | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/ipaserver/install/cainstance.py b/ipaserver/install/cainstance.py index 75a37afca..cc86e18fc 100644 --- a/ipaserver/install/cainstance.py +++ b/ipaserver/install/cainstance.py @@ -345,7 +345,14 @@ class CAInstance(DogtagInstance): self.dm_password = dm_password self.admin_user = "admin" self.admin_groups = ADMIN_GROUPS + + # NOTE: "admin_password" refers to the password for PKI + # "admin" account. This is not necessarily the same as + # the IPA admin password. Indeed, ca.configure_instance + # gets called with admin_password=dm_password. + # self.admin_password = admin_password + self.pkcs12_info = pkcs12_info if self.pkcs12_info is not None: self.clone = True