Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Authinfo #46

Merged
merged 18 commits into from
Aug 21, 2013
Merged

Authinfo #46

merged 18 commits into from
Aug 21, 2013

Conversation

tomas-edwardsson
Copy link
Contributor

This change will make sure that no passwords and other credential information is visible in the process information while installing via winexe.

This change will make sure that no passwords and other credential
information is visible in the process information while installing via
winexe.
Make sure that authinfo is always deleted, remove tmpdir on succesfull
installation.
This change will make sure that no passwords and other credential
information is visible in the process information while installing via
winexe.
@palli
Copy link
Contributor

palli commented Aug 19, 2013

Looks awesome. Two questions:

  • Can you test how the script reacts if domain is not provided
  • Double check the smbclient command is in fact working as expected (because you could be installing on the same host over and over again and the copy process failing every time)
  • the trap command might as well clean up $TMPDIR and save a little bit of code at the end of the file

Renamed logfile to install.log
Error messages now reference the install log when they fail.
Skips actual installation and just does a connection test.
Now the following variables can be set through environment

	DOMAIN
	DOMAIN_USER
	DOMAIN_PASSWORD
@tomas-edwardsson
Copy link
Contributor Author

@pall-valmundsson fixed in 22ff0c3

Logging to /var/log/okconfig and logrotation
Support for -A <authfile>
Removed tempdir and use mktemp only for authfiles
@tomas-edwardsson
Copy link
Contributor Author

@pall-valmundsson Sorry about the hugeness of a94b26a, it should alleviate the issues about exiting on one failed host. But it does a few things as well. I'm merging this pull request to get it available in the ok-testing repository.

What I have tested in my environment deployment to:

  • Windows 2003
  • Windows 2008 R2
  • Windows 2012

Any testers would be highly appreciated and can then use the rpm from ok-testing or from source.

tomas-edwardsson added a commit that referenced this pull request Aug 21, 2013
Authinfo and logging improvements, mostly to remove exposure of password in command line.
@tomas-edwardsson tomas-edwardsson merged commit 37fd18b into master Aug 21, 2013
domain=${DOMAIN}
EO
else
DOMAIN=$(grep -i ^domain ${USER_AUTHFILE} |awk -F" = " '{print $2}')
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Shouldn't the awk delimiter be "="? This one requires whitespace around =.

@pall-valmundsson
Copy link
Contributor

Otherwise it looks pretty good, I'm currently using a locally hacked version of an old version of install_nsclient.sh. I'll test this one soon.

tomas-edwardsson added a commit that referenced this pull request Aug 21, 2013
authentication files can have spaces in them between key and value but
I'm making the assumption that the DOMAIN never has so I remove all
spaces from DOMAIN
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants