join.sh: Password hash decryption-method is not FIPS-compatible about join-domain-formula HOT 3 CLOSED

Per Red Hat Solution Document #176633, current method fails due to default digest method being (the non FIPS-compatible) MD5. Will need to update methods for creating and decrypting hash-string. Change the join.sh helper script's PWdecrypt function to:

local PWCLEAR=$(echo "${PWCRYPT}" | openssl aes-256-cbc -md sha256 -a -d \
                   -salt -pass pass:"${PWUNLOCK}")

from join-domain-formula.

Maybe make the cipher methods pillar items, since they need to be the same for the encrypt and decrypt routines?

from join-domain-formula.

Worth considering, but, really shouldn't be using MD5 even if the system isn't FIPSed. Since -md sha256 is portable, not inclined to more-broadly reorganize things until I can get the basic functionality of all the deadline pieces sorted.

To borrow a phrase, "put a pin in it" (along with better-organizing the combined pillar as a whole).

from join-domain-formula.