From bae291def780c81144c8f4d71ced5007e1ee3867 Mon Sep 17 00:00:00 2001 From: Tomas Babej Date: Wed, 18 Sep 2013 12:56:00 +0200 Subject: Warn user about realm-domain mismatch in install scripts If the IPA server is setup with non-matching domain and realm names, it will not be able to estabilish trust with the Active Directory. Adds warnings to the ipa-server-install and warning to the ipa-adtrust-install (which has to be confirmed). Man pages for the ipa-server-install and ipa-adtrust-install were updated with the relevant notes. https://fedorahosted.org/freeipa/ticket/3924 --- install/tools/man/ipa-adtrust-install.1 | 3 +++ install/tools/man/ipa-server-install.1 | 2 +- 2 files changed, 4 insertions(+), 1 deletion(-) (limited to 'install/tools/man') diff --git a/install/tools/man/ipa-adtrust-install.1 b/install/tools/man/ipa-adtrust-install.1 index 7f0566e13..b0aa8ceef 100644 --- a/install/tools/man/ipa-adtrust-install.1 +++ b/install/tools/man/ipa-adtrust-install.1 @@ -26,6 +26,9 @@ Adds all necessary objects and configuration to allow an IPA server to create a trust to an Active Directory domain. This requires that the IPA server is already installed and configured. +Please note you will not be able to estabilish an trust to an Active Directory +domain unless the realm name of the IPA server matches its domain name. + ipa\-adtrust\-install can be run multiple times to reinstall deleted objects or broken configuration files. E.g. a fresh samba configuration (smb.conf file and registry based configuration can be created. Other items like e.g. the diff --git a/install/tools/man/ipa-server-install.1 b/install/tools/man/ipa-server-install.1 index 5f81cec94..a093078cb 100644 --- a/install/tools/man/ipa-server-install.1 +++ b/install/tools/man/ipa-server-install.1 @@ -28,7 +28,7 @@ Configures the services needed by an IPA server. This includes setting up a Kerb .SS "BASIC OPTIONS" .TP \fB\-r\fR \fIREALM_NAME\fR, \fB\-\-realm\fR=\fIREALM_NAME\fR -The Kerberos realm name for the IPA server +The Kerberos realm name for the IPA server. You will not be able to estabilish trust with Active Directory unless the realm name is uppercased domain name. .TP \fB\-n\fR \fIDOMAIN_NAME\fR, \fB\-\-domain\fR=\fIDOMAIN_NAME\fR Your DNS domain name -- cgit