freeipa

#631 ipa-getkeytab does not support -W option
Closed: fixed by cheimes. Opened by dpal.

Closed: fixed
Reopen Issue

Description of problem:
Retrieving a keytab without kerberos credentials requires bind password to be
entered in command line itself.

Version-Release number of selected component (if applicable):
ipa-client-1.91-0.2010121515gitfbe72a4.fc14.x86_64

How reproducible:

Steps to Reproduce:
1. ipa-getkeytab --server=gsrf14ipas.lab.eng.pnq.redhat.com --principal
tanishtha@LAB.ENG.PNQ.REDHAT.COM --keytab /opt/krb5.keytab -D "cn=Directory
Manager" -w Secret123

Actual results:
"Keytab successfully retrieved and stored in: /opt/krb5.keytab", however, this
require the bind password to be entered in the command line itself.

Expected results:
-W prompt for bind password

I suggest we should also have a "-W" as command option to prompt for bind
password.

Additional info:

Metadata Update from @dpal:
- Issue assigned to rcritten
- Issue set to the milestone: Tickets Deferred

https://github.com/freeipa/freeipa/pull/2997

Metadata Update from @rcritten:
- Issue close_status updated to: None
- Issue set to the milestone: FreeIPA 4.7.3 (was: Tickets Deferred)

master:

  • a241a81ba4fa489be4503828787e69adbf624fc0 Add interactive prompt for the LDAP bind password to ipa-getkeytab

Metadata Update from @cheimes:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

ipa-4-6:

  • a05ebcf9fe63eaebddb2b76d3556814440fe1a86 Add interactive prompt for the LDAP bind password to ipa-getkeytab
  • 972e7200a57195347625e00ea64584d935a3cb92 CVE-2020-1722: prevent use of too long passwords
Metadata
None
None
None
High
defect
IPA
0
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.