<p dir="ltr">Aleksey, </p>
<p dir="ltr">Did removing the password from the file not cause the system to prompt you for the password at startup. Also, are you looking at doing both nss and 389 passwords? </p>
<p dir="ltr">-- David </p>
<div class="gmail_quote">On Aug 26, 2015 5:58 AM, "Aleksey Chudov" <<a href="mailto:aleksey.chudov@gmail.com">aleksey.chudov@gmail.com</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi,<br><div><br>The <code>password.conf</code> file stores system 
passwords in plaintext, and I prefer to enter system 
passwords manually and to remove the password file.
                        <br><br></div><div>I have found original documentation <a href="https://access.redhat.com/documentation/en-US/Red_Hat_Certificate_System/8.1/html/Admin_Guide/System_Passwords.html" target="_blank">https://access.redhat.com/documentation/en-US/Red_Hat_Certificate_System/8.1/html/Admin_Guide/System_Passwords.html</a>. But it is for older version on PKI and does not work with systemd.<br></div><div><br>How to setup PKI CA to ask for NSS DB password at startup?<br><br>Packages versions (I have rebuilt F22 packages for CentOS 7):<br># rpm -qa | grep pki<br>pki-base-10.2.5-1.el7.centos.noarch<br>pki-server-10.2.5-1.el7.centos.noarch<br>dogtag-pki-server-theme-10.2.5-1.el7.centos.noarch<br>pki-ca-10.2.5-1.el7.centos.noarch<br>pki-tools-10.2.5-1.el7.centos.x86_64<br>dogtag-pki-console-theme-10.2.5-1.el7.centos.noarch<br><br></div>Aleksey<br></div>
<br>_______________________________________________<br>
Pki-users mailing list<br>
<a href="mailto:Pki-users@redhat.com">Pki-users@redhat.com</a><br>
<a href="https://www.redhat.com/mailman/listinfo/pki-users" rel="noreferrer" target="_blank">https://www.redhat.com/mailman/listinfo/pki-users</a><br></blockquote></div>