diff options
| author | Rob Crittenden <rcritten@redhat.com> | 2011-06-17 16:47:39 -0400 |
|---|---|---|
| committer | Rob Crittenden <rcritten@redhat.com> | 2011-06-23 19:04:33 -0400 |
| commit | 8a32bb3746802a29b2655e4ad2cbbba8481e1eaf (patch) | |
| tree | 14c7e77b744d31e303d78313cf9866502dad1ef9 /install/tools/man/ipa-replica-install.1 | |
| parent | cbffe1d65df222acf6eb26cdaa121932a01f9ba7 (diff) | |
| download | freeipa-8a32bb3746802a29b2655e4ad2cbbba8481e1eaf.tar.gz freeipa-8a32bb3746802a29b2655e4ad2cbbba8481e1eaf.tar.xz freeipa-8a32bb3746802a29b2655e4ad2cbbba8481e1eaf.zip | |
Make dogtag an optional (and default un-) installed component in a replica.
A dogtag replica file is created as usual. When the replica is installed
dogtag is optional and not installed by default. Adding the --setup-ca
option will configure it when the replica is installed.
A new tool ipa-ca-install will configure dogtag if it wasn't configured
when the replica was initially installed.
This moves a fair bit of code out of ipa-replica-install into
installutils and cainstance to avoid duplication.
https://fedorahosted.org/freeipa/ticket/1251
Diffstat (limited to 'install/tools/man/ipa-replica-install.1')
| -rw-r--r-- | install/tools/man/ipa-replica-install.1 | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/install/tools/man/ipa-replica-install.1 b/install/tools/man/ipa-replica-install.1 index 888923546..1dac5faa1 100644 --- a/install/tools/man/ipa-replica-install.1 +++ b/install/tools/man/ipa-replica-install.1 @@ -33,12 +33,16 @@ Do not configure NTP \fB\-d\fR, \fB\-\-debug Enable debug logging when more verbose output is needed .TP -\fB\-p\fR, \fB\-\-password\fR=\fIDM_PASSWORD\fR +\fB\-p\fR \fIDM_PASSWORD\fR, \fB\-\-password\fR=\fIDM_PASSWORD\fR Directory Manager (existing master) password .TP \fB\-w\fR \fIADMIN_PASSWORD\fR, \fB\-\-admin\-password\fR=\fIADMIN_PASSWORD\fR Admin user Kerberos password used for connection check .TP +\fB\-\-setup\-ca\fR +Install and configure a CA on this replica. If a CA is not configured then +certificate operations will be forwarded to a master with a CA installed. +.TP \fB\-\-setup\-dns\fR Generate a DNS zone if it does not exist already and configure the DNS server. This option requires that you either specify at least one DNS forwarder through |