summaryrefslogtreecommitdiffstats
path: root/ipa-client/man/ipa-client-install.1
diff options
context:
space:
mode:
authorRob Crittenden <rcritten@redhat.com>2010-02-24 11:38:59 -0500
committerRob Crittenden <rcritten@redhat.com>2010-03-02 18:20:07 -0500
commit889cf124d8cba470dadf2ca88bcbb07d13bc928b (patch)
tree7e4e35cf4686ba87c503c046b5284002c3e9a805 /ipa-client/man/ipa-client-install.1
parent3b4c4acfd24fcfd1d4b34a355a684f0683edee38 (diff)
downloadfreeipa-889cf124d8cba470dadf2ca88bcbb07d13bc928b.tar.gz
freeipa-889cf124d8cba470dadf2ca88bcbb07d13bc928b.tar.xz
freeipa-889cf124d8cba470dadf2ca88bcbb07d13bc928b.zip
Update available options and descriptions in client man pages
Diffstat (limited to 'ipa-client/man/ipa-client-install.1')
-rw-r--r--ipa-client/man/ipa-client-install.127
1 files changed, 24 insertions, 3 deletions
diff --git a/ipa-client/man/ipa-client-install.1 b/ipa-client/man/ipa-client-install.1
index 49595a06..d5efb63b 100644
--- a/ipa-client/man/ipa-client-install.1
+++ b/ipa-client/man/ipa-client-install.1
@@ -24,7 +24,9 @@ ipa\-client\-install [\fIOPTION\fR]...
.SH "DESCRIPTION"
Configures a client machine to use IPA for authentication and identity services.
-This configures PAM and NSS (Name Switching Service) to work with an IPA server over Kerberos and LDAP.
+By default this configures SSSD to connect to an IPA server for authentication and authorization. Optionally one can instead configure PAM and NSS (Name Switching Service) to work with an IPA server over Kerberos and LDAP.
+
+An authorized user is required to join a client machine to IPA. This can take the form of a kerberos principal or a one-time password associated with the machine.
.SH "OPTIONS"
.TP
\fB\-\-domain\fR=\fIDOMAIN\fR
@@ -46,9 +48,28 @@ Print debugging information to stdout
Unattended installation. The user will not be prompted.
.TP
\fB\-N\fR, \fB\-\-no\-ntp\fR
-Do not configure or enable NTP
+Do not configure or enable NTP.
+.TP
+\fB\-S\fR, \fB\-\-no\-sssd\fR
+Do not configure the client to use SSSD for authentication, use nss_ldap instead.
+.TP
\fB\-\-on\-master\fB
-The client is being configured on an IPA server
+The client is being configured on an IPA server.
+.TP
+\fB\-w\fR, \fB\-\-password\fR
+Password for joining a machine to the IPA realm.
+.TP
+\fB\-W\fR
+Prompt for the password for joining a machine to the IPA realm.
+.TP
+\fB\-p\fR, \fB\-\-principal\fR
+Principal to use to join the IPA realm.
+.TP
+\fB\-\-permit\fR
+Set the SSSD access rules to permit all access. Otherwise the machine will be controlled by the Host-based Access Controls on the IPA server.
+.TP
+\fB\-\-uninstall\fR
+Remove the IPA client software and restore the configuration to the pre-IPA state.
.SH "EXIT STATUS"
0 if the installation was successful