[Freeipa-devel] [PATCH] Don't pass the DM password on the command-line

[Rob Crittenden]

We used the -w flag when calling ldapmodify so were passing the DM 
password on the command-line. This meant that if something went wrong 
the DM password got logged.

Use the -y flag instead which takes a file. I'm using mkstemp() to 
create that file and a try/finally to be sure it is always removed, even 
if an error is thrown.

rob
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-23-ldapmodify.patch
Type: text/x-patch
Size: 2826 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20080519/f1376069/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20080519/f1376069/attachment-0001.bin>