add supper_realm to config file (#11)

kheeklab · Apr 27, 2021 · b356097 · b356097
1 parent 08d77ea
commit b356097
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/configs/app/prestart.sh b/configs/app/prestart.sh
@@ -22,7 +22,7 @@ if [ "${PI_SKIP_BOOTSTRAP}" = false ]; then
     fi
     pi-manage createdb
     pi-manage db stamp head -d /usr/local/lib/privacyidea/migrations/
-    if { [ -z ${PI_ADMIN_USER} ] && [ -z ${PI_ADMIN_PASSWORD} ]; } then
+    if { [ "${PI_SKIP_BOOTSTRAP}" = false ] && [ -z ${PI_ADMIN_USER} ] && [ -z ${PI_ADMIN_PASSWORD} ]; } then
         echo "Create deafult admin user. Not recommented in production. Please set PI_ADMIN_USER and PI_ADMIN_PASSWORD in production enviroment."
         pi-manage admin add admin -p privacyidea
     else

diff --git a/configs/config.py b/configs/config.py
@@ -11,7 +11,8 @@
 if PI_PEPPER is None:
     print("PI_PEPPER not set! Refusing to start")
     sys.exit(1)
-
+# The realm, where users are allowed to login as administrators
+SUPERUSER_REALM = os.environ.get('SUPERUSER_REALM', '['administrator']')
 SQLALCHEMY_DATABASE_URI = os.environ.get('SQLALCHEMY_DATABASE_URI', 'sqlite:////data/privacyidea/privacyidea.db')
 PI_ENCFILE = os.environ.get("PI_ENCFILE", "/data/privacyidea/encfile")
 PI_HSM = os.environ.get("PI_HSM", "default")