diff options
| author | Fraser Tweedale <ftweedal@redhat.com> | 2016-11-17 09:26:02 +1000 |
|---|---|---|
| committer | Jan Cholasta <jcholast@redhat.com> | 2017-01-11 15:27:55 +0100 |
| commit | 3f5660973251fe4b178e6486b6b86fbdd162d4d6 (patch) | |
| tree | 234ba558ea2e0aea925771f2ee8b34d993538ab3 /ipaserver/install | |
| parent | 3d01ec14c6e36fa962d0c54b2e08df0ecd401bd6 (diff) | |
| download | freeipa-3f5660973251fe4b178e6486b6b86fbdd162d4d6.tar.gz freeipa-3f5660973251fe4b178e6486b6b86fbdd162d4d6.tar.xz freeipa-3f5660973251fe4b178e6486b6b86fbdd162d4d6.zip | |
Indicate that ca subject / subject base uses LDAP RDN order
Update man pages and help output to indicate that --subject-base and
--ca-subject options interpret their arguments in LDAP order.
Fixes: https://fedorahosted.org/freeipa/ticket/6455
Reviewed-By: Christian Heimes <cheimes@redhat.com>
Diffstat (limited to 'ipaserver/install')
| -rw-r--r-- | ipaserver/install/ca.py | 8 |
1 files changed, 6 insertions, 2 deletions
diff --git a/ipaserver/install/ca.py b/ipaserver/install/ca.py index cc52b9053..af8cc53ae 100644 --- a/ipaserver/install/ca.py +++ b/ipaserver/install/ca.py @@ -434,7 +434,10 @@ class CAInstallInterface(dogtag.DogtagInstallInterface, subject_base = knob( str, None, - description="The certificate subject base (default O=<realm-name>)", + description=( + "The certificate subject base (default O=<realm-name>). " + "RDNs are in LDAP order (most specific RDN first)." + ), cli_deprecated_names=['--subject'], ) subject_base = master_install_only(subject_base) @@ -447,7 +450,8 @@ class CAInstallInterface(dogtag.DogtagInstallInterface, str, None, description=( "The CA certificate subject DN " - "(default CN=Certificate Authority,O=<realm-name>)" + "(default CN=Certificate Authority,O=<realm-name>). " + "RDNs are in LDAP order (most specific RDN first)." ), ) ca_subject = master_install_only(ca_subject) |