On Thu, Mar 25, 2021 at 6:53 AM Dominik Vogt via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote:
>
> We want to generate the initial passwords at random.  Is there a
> non-interactive method of telling ipa-server-install the passwords
> (-a and -p options) that does not require putting them on the
> command line?  An environment variable would be fine, but
> passwords must not be visible in the process list (ps -efa) and
> must never be stored in files unencrypted.
>

You may use ansible-freeipa (https://github.com/freeipa/ansible-freeipa) along with Ansible Vault.

Rafael

> Ciao
>
> Dominik ^_^  ^_^
>
> --
>
> Dominik Vogt
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
> To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org
> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
> Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure



--
Rafael Guterres Jeffman
Senior Software Engineer
FreeIPA - Red Hat