On Thu, Mar 25, 2021 at 6:53 AM Dominik Vogt via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote: > > We want to generate the initial passwords at random. Is there a > non-interactive method of telling ipa-server-install the passwords > (-a and -p options) that does not require putting them on the > command line? An environment variable would be fine, but > passwords must not be visible in the process list (ps -efa) and > must never be stored in files unencrypted. >