Since we added the feature to test if ports are open we are now requiring 2 passwords to install a replica: the DM password and the admin password (the second one is needed to ssh into the master to run the port scanner against the replica being installed).
We should investigate if we can avoid using the DM password to encryppt the replica file and use just the admin password. The DM password to be set in the dirsrv instance can be carried as a copy of the hash we store in dse.ldif and replaced after dirsrv is configured.
This has been implemented with the new Replica Promotion code, only the admin password is required in this case. Closing.
Metadata Update from @simo: - Issue assigned to simo - Issue set to the milestone: FreeIPA 4.3
Login to comment on this ticket.