From d6d12e9dc597d6637ae49057a44b51476ff876b0 Mon Sep 17 00:00:00 2001 From: Rob Crittenden Date: Tue, 26 Feb 2008 13:51:56 -0500 Subject: Require that service principals resolve to a DNS A record. There is a --force option for those who know what they are doing. 433483 --- ipa-admintools/man/ipa-addservice.1 | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) (limited to 'ipa-admintools/man') diff --git a/ipa-admintools/man/ipa-addservice.1 b/ipa-admintools/man/ipa-addservice.1 index 4e3060fc..f680db28 100644 --- a/ipa-admintools/man/ipa-addservice.1 +++ b/ipa-admintools/man/ipa-addservice.1 @@ -21,8 +21,7 @@ ipa\-addservice \- Add a service principal .SH "SYNOPSIS" -ipa\-addservice \fIprincipal\fR - +ipa\-addservice [\fIOPTION\fR]... \fIprincipal\fR .SH "DESCRIPTION" Adds a service principal \fIprincipal\fR. @@ -42,6 +41,12 @@ rpc snmp The IPA server automatically appends the Kerberos realm for which it is configured. You cannot specify a different realm. + +The hostname must resolve to a DNS A record in order to ensure that it will work with Kerberos. Use the \-\-force flag to force the creation of a principal. +.SH "OPTIONS" +.TP +\fB\-\-force\fR +Force the creation of the given principal name. .SH "EXAMPLES" .TP ipa\-addservice HTTP/www.example.com -- cgit