diff options
author | Rob Crittenden <rcritten@redhat.com> | 2012-01-20 13:30:25 -0500 |
---|---|---|
committer | Martin Kosek <mkosek@redhat.com> | 2012-01-23 16:07:49 +0100 |
commit | f3b606b627ea317e87b89ffb6ce2f0fb745f38aa (patch) | |
tree | 9f14f0acc3d6ea33695ec58bc61569d8817a763b /install/tools | |
parent | b353239e59a8eb32fb1ac66e29228dc95b74e4e6 (diff) | |
download | freeipa-f3b606b627ea317e87b89ffb6ce2f0fb745f38aa.tar.gz freeipa-f3b606b627ea317e87b89ffb6ce2f0fb745f38aa.tar.xz freeipa-f3b606b627ea317e87b89ffb6ce2f0fb745f38aa.zip |
Update and package ipa-upgradeconfig man page.
Require that the tool be run as root to avoid a permission-related
backtrace.
https://fedorahosted.org/freeipa/ticket/1758
Diffstat (limited to 'install/tools')
-rw-r--r-- | install/tools/ipa-upgradeconfig | 3 | ||||
-rw-r--r-- | install/tools/man/Makefile.am | 1 | ||||
-rw-r--r-- | install/tools/man/ipa-upgradeconfig.8 | 4 |
3 files changed, 7 insertions, 1 deletions
diff --git a/install/tools/ipa-upgradeconfig b/install/tools/ipa-upgradeconfig index 8c4d9a260..2cd3ef376 100644 --- a/install/tools/ipa-upgradeconfig +++ b/install/tools/ipa-upgradeconfig @@ -164,6 +164,9 @@ def main(): exit gracefully. """ + if not os.geteuid()==0: + sys.exit("\nYou must be root to run this script.\n") + try: krbctx = krbV.default_context() except krbV.Krb5Error, e: diff --git a/install/tools/man/Makefile.am b/install/tools/man/Makefile.am index 91aa23ca1..8d5d416d9 100644 --- a/install/tools/man/Makefile.am +++ b/install/tools/man/Makefile.am @@ -23,6 +23,7 @@ man1_MANS = \ man8_MANS = \ ipactl.8 \ + ipa-upgradeconfig.8 \ $(NULL) install-data-hook: diff --git a/install/tools/man/ipa-upgradeconfig.8 b/install/tools/man/ipa-upgradeconfig.8 index 76e2782a4..442f05482 100644 --- a/install/tools/man/ipa-upgradeconfig.8 +++ b/install/tools/man/ipa-upgradeconfig.8 @@ -26,7 +26,9 @@ A tool to update the IPA Apache configuration during an upgrade. It examines the VERSION value in the head of \fI/etc/httpd/conf.d/ipa.conf\fR and \fI/etc/httpd/conf.d/ipa\-rewrite.conf\fR and compares this with the templates. If an update is needed then new files are written. -This is not intended to be run by an end\-user. It is executed when the IPA rpms are upgraded. +It also will convert a CA configured to be accessible via ports 9443, 9444, 9445 and 9446 to be proxied by the IPA web server on ports 80 and 443. + +This is not intended to be run by an end\-user. It is executed when the IPA rpms are upgraded. This must be run as the root user. .SH "EXIT STATUS" 0 if the update was successful or there was nothing to do |