summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorTomas Babej <tbabej@redhat.com>2015-08-17 08:46:20 +0200
committerPetr Vobornik <pvoborni@redhat.com>2015-08-17 17:50:34 +0200
commit5a9a8e2b09ada28d4f9a32eb833ffdc30d099fd0 (patch)
treeee1793654af0724ad75dcd388bbf062e9bf8b7e7
parentfc62c135c877fd9b731b3a275b78ba30e29c4e08 (diff)
downloadfreeipa-5a9a8e2b09ada28d4f9a32eb833ffdc30d099fd0.tar.gz
freeipa-5a9a8e2b09ada28d4f9a32eb833ffdc30d099fd0.tar.xz
freeipa-5a9a8e2b09ada28d4f9a32eb833ffdc30d099fd0.zip
winsync-migrate: Expand the man page
https://fedorahosted.org/freeipa/ticket/5162 Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
-rw-r--r--install/tools/man/ipa-winsync-migrate.127
1 files changed, 26 insertions, 1 deletions
diff --git a/install/tools/man/ipa-winsync-migrate.1 b/install/tools/man/ipa-winsync-migrate.1
index a1e01c83d..88702bad6 100644
--- a/install/tools/man/ipa-winsync-migrate.1
+++ b/install/tools/man/ipa-winsync-migrate.1
@@ -16,7 +16,7 @@
.\"
.\" Author: Tomas Babej <tbabej@redhat.com>
.\"
-.TH "ipa-advise" "1" "Mar 10 2015" "FreeIPA" "FreeIPA Manual Pages"
+.TH "ipa-winsync-migrate" "1" "Mar 10 2015" "FreeIPA" "FreeIPA Manual Pages"
.SH "NAME"
ipa\-winsync\-migrate \- Seamless migration of AD users created by winsync to native AD users.
.SH "SYNOPSIS"
@@ -25,3 +25,28 @@ ipa\-winsync\-migrate
Migrates AD users created by winsync agreement to ID overrides in
the Default Trust View, thus preserving the actual POSIX attributes
already established.
+
+Prior to the actual migration, the winsync replication agreement
+will be removed to protect the removal of the user accounts
+on the Active Directory side.
+
+During the migration, group, assigned roles, HBAC rules and SELinux
+memberships of the synced users will be preserved. Any local copies
+(created by winsync) of the migrated users will be removed.
+
+.SH "WARNINGS"
+After the migration, any PassSync agreements need to be removed
+from Active Directory Domain Controllers, otherwise they might
+attempt to update passwords for accounts that no longer exist
+on the IPA server.
+
+.SH "OPTIONS"
+.TP
+\fB\-\-realm\fR
+The Active Directory realm the winsynced users belong to.
+.TP
+\fB\-\-server\fR
+The hostname of Active Directory Domain Controller the winsync replication agreement is established with.
+.TP
+\fB\-\-unattended\fR
+Never prompts for user input.