[SSPS] debian-sys-maint password now changed and written to debian.cnf

1 files changed, 12 insertions, 4 deletions

diff --git a/satellit_installer/includes/10-script_dropper.inc b/satellit_installer/includes/10-script_dropper.inc
index b483c94..5d08083 100644
--- a/satellit_installer/includes/10-script_dropper.inc
+++ b/satellit_installer/includes/10-script_dropper.inc
@@ -25,8 +25,8 @@ drop_script() {
 	echo
 	echo "Satellite server install post-install script"
 	echo
-	echo "This script will set safe password for root, the mysql root user"
-	echo 'and two mysql user accounts (openslx and bwLehrpool).'
+	echo "This script will set safe password for root, the mysql root user,"
+	echo 'two mysql user accounts (openslx and bwLehrpool) and debian-sys-maint.'
 	echo
 	echo "We recommend you choose a secure password for root. The other"
 	echo "passwords will be auto generated."
@@ -55,11 +55,16 @@ drop_script() {
 	MYSQL_OPENSLX_NEW=\$(generate_password)
 	echo "SET PASSWORD FOR 'openslx'@'localhost' = PASSWORD('\$MYSQL_OPENSLX_NEW');" | mysql -u root -p\${MYSQL_ROOT_NEW}
 	echo "MYSQL_OPENSLX_PASS=\$MYSQL_OPENSLX_NEW" >> /root/new_passwords
-	echo "and mysql openslx password."
+	echo "mysql openslx password,"
+
+	MYSQL_SYSMAINT_NEW=\$(generate_password)
+	echo "SET PASSWORD FOR 'debian-sys-maint'@'localhost' = PASSWORD('\$MYSQL_SYSMAINT_NEW'); | mysql -u root -p\${MYSQL_ROOT_NEW}
+	echo "and debian-sys-maint."
 
 	echo "... done."
 	echo
-	echo "Now we will save the newly set passwords in an encrypted file..." 
+	echo "Now we will save the newly set passwords (save debian-sys-maint)"
+	echo "in an encrypted file..."
 
 	cat /root/new_passwords | openssl rsautl -encrypt -pubin -inkey ${BASEDIR}/static_files/finish_setup_public_key.pem > \
 		${BASEDIR}/static_files/new_passwords.encrypted
@@ -72,6 +77,9 @@ drop_script() {
 	# Patching openslx-mysql-userpass into slx-admin config:
 	sed -i "s/%MYSQL_OPENSLX_PASS%/\$MYSQL_OPENSLX_NEW/g" "$OPENSLXSRVDIR/www/slx-admin/config.php"
 
+	# Patching debian-sys-maint password into /etc/mysql/debian.cnf:
+	sed -i "s/password = .*/password = \$MYSQL_SYSMAINT_NEW/g" "/etc/mysql/debian.cnf"
+
 	# appending a variable with satellite server build date/time to slx-admin config:
 	echo "define('CONFIG_FOOTER', '(c) 2019 Heinz "$(date "+%Y-%m-%d %H:%m:%S")"');" >> "$OPENSLXSRVDIR/www/slx-admin/config.php"