diff options
| -rwxr-xr-x | src/conf_mode/system-login.py | 10 |
1 files changed, 7 insertions, 3 deletions
diff --git a/src/conf_mode/system-login.py b/src/conf_mode/system-login.py index e6dfd544b..349dcce2a 100755 --- a/src/conf_mode/system-login.py +++ b/src/conf_mode/system-login.py @@ -232,9 +232,13 @@ def generate(login): "authentication encrypted-password '{password_encrypted}'" .format(**user), env=env) - elif user['password_encrypted']: - # unset encrypted password so we do not update it with the same - # value again and thus it will not appear in system logs + elif getspnam(user['name']).sp_pwdp == user['password_encrypted']: + # If the current encrypted bassword matches the encrypted password + # from the config - do not update it. This will remove the encrypted + # value from the system logs. + # + # The encrypted password will be set only once during the first boot + # after an image upgrade. user['password_encrypted'] = '' if len(login['radius_server']) > 0: |