summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorGabe <redhatrises@gmail.com>2015-03-13 07:34:49 -0600
committerMartin Kosek <mkosek@redhat.com>2015-03-13 14:46:45 +0100
commitfbf192f0e255c5f48e93f8838fc530b26f357deb (patch)
tree6830fe0353c6f709444cd7b6761950f789610eb1
parent6af49259c2be8da66fe4f46b1eb6c25a69185a6b (diff)
downloadfreeipa-fbf192f0e255c5f48e93f8838fc530b26f357deb.tar.gz
freeipa-fbf192f0e255c5f48e93f8838fc530b26f357deb.tar.xz
freeipa-fbf192f0e255c5f48e93f8838fc530b26f357deb.zip
ipa-replica-prepare can only be created on the first master
https://fedorahosted.org/freeipa/ticket/4944 Reviewed-By: Martin Kosek <mkosek@redhat.com>
-rw-r--r--install/tools/man/ipa-replica-prepare.16
1 files changed, 4 insertions, 2 deletions
diff --git a/install/tools/man/ipa-replica-prepare.1 b/install/tools/man/ipa-replica-prepare.1
index 1879d2ee8..2063657f8 100644
--- a/install/tools/man/ipa-replica-prepare.1
+++ b/install/tools/man/ipa-replica-prepare.1
@@ -24,15 +24,17 @@ ipa\-replica\-prepare [\fIOPTION\fR]... hostname
.SH "DESCRIPTION"
Generates a replica file that may be used with ipa\-replica\-install to create a replica of an IPA server.
-A replica can only be created on an IPA server installed with ipa\-server\-install (the first server).
+A replica can be created on any IPA master or replica server.
You must provide the fully\-qualified hostname of the machine you want to install the replica on and a host\-specific replica_file will be created. It is host\-specific because SSL server certificates are generated as part of the process and they are specific to a particular hostname.
If IPA manages the DNS for your domain, you should either use the \fB\-\-ip\-address\fR option or add the forward and reverse records manually using IPA plugins.
Once the file has been created it will be named replica\-hostname. This file can then be moved across the network to the target machine and a new IPA replica setup by running ipa\-replica\-install replica\-hostname.
-
+.SS "Limitations"
A replica should only be installed on the same or higher version of IPA on the remote system.
+
+A replica with PKI can only be installed from a replica file prepared on a master with PKI.
.SH "OPTIONS"
.TP
\fB\-\-dirsrv\-cert\-file\fR=\fIFILE\fR