|
|
590d18 |
From 6e006377d043155590024235d770cb37eb801652 Mon Sep 17 00:00:00 2001
|
|
|
590d18 |
From: Tomas Babej <tbabej@redhat.com>
|
|
|
590d18 |
Date: Mon, 17 Aug 2015 08:46:20 +0200
|
|
|
590d18 |
Subject: [PATCH] winsync-migrate: Expand the man page
|
|
|
590d18 |
|
|
|
590d18 |
https://fedorahosted.org/freeipa/ticket/5162
|
|
|
590d18 |
|
|
|
590d18 |
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
|
|
|
590d18 |
---
|
|
|
590d18 |
install/tools/man/ipa-winsync-migrate.1 | 27 ++++++++++++++++++++++++++-
|
|
|
590d18 |
1 file changed, 26 insertions(+), 1 deletion(-)
|
|
|
590d18 |
|
|
|
590d18 |
diff --git a/install/tools/man/ipa-winsync-migrate.1 b/install/tools/man/ipa-winsync-migrate.1
|
|
|
590d18 |
index a1e01c83da6017d5cbe10297dbe84a4dd1741ec7..88702bad6fca66206dcbc1a90fce495eb33598fb 100644
|
|
|
590d18 |
--- a/install/tools/man/ipa-winsync-migrate.1
|
|
|
590d18 |
+++ b/install/tools/man/ipa-winsync-migrate.1
|
|
|
590d18 |
@@ -16,7 +16,7 @@
|
|
|
590d18 |
.\"
|
|
|
590d18 |
.\" Author: Tomas Babej <tbabej@redhat.com>
|
|
|
590d18 |
.\"
|
|
|
590d18 |
-.TH "ipa-advise" "1" "Mar 10 2015" "FreeIPA" "FreeIPA Manual Pages"
|
|
|
590d18 |
+.TH "ipa-winsync-migrate" "1" "Mar 10 2015" "FreeIPA" "FreeIPA Manual Pages"
|
|
|
590d18 |
.SH "NAME"
|
|
|
590d18 |
ipa\-winsync\-migrate \- Seamless migration of AD users created by winsync to native AD users.
|
|
|
590d18 |
.SH "SYNOPSIS"
|
|
|
590d18 |
@@ -25,3 +25,28 @@ ipa\-winsync\-migrate
|
|
|
590d18 |
Migrates AD users created by winsync agreement to ID overrides in
|
|
|
590d18 |
the Default Trust View, thus preserving the actual POSIX attributes
|
|
|
590d18 |
already established.
|
|
|
590d18 |
+
|
|
|
590d18 |
+Prior to the actual migration, the winsync replication agreement
|
|
|
590d18 |
+will be removed to protect the removal of the user accounts
|
|
|
590d18 |
+on the Active Directory side.
|
|
|
590d18 |
+
|
|
|
590d18 |
+During the migration, group, assigned roles, HBAC rules and SELinux
|
|
|
590d18 |
+memberships of the synced users will be preserved. Any local copies
|
|
|
590d18 |
+(created by winsync) of the migrated users will be removed.
|
|
|
590d18 |
+
|
|
|
590d18 |
+.SH "WARNINGS"
|
|
|
590d18 |
+After the migration, any PassSync agreements need to be removed
|
|
|
590d18 |
+from Active Directory Domain Controllers, otherwise they might
|
|
|
590d18 |
+attempt to update passwords for accounts that no longer exist
|
|
|
590d18 |
+on the IPA server.
|
|
|
590d18 |
+
|
|
|
590d18 |
+.SH "OPTIONS"
|
|
|
590d18 |
+.TP
|
|
|
590d18 |
+\fB\-\-realm\fR
|
|
|
590d18 |
+The Active Directory realm the winsynced users belong to.
|
|
|
590d18 |
+.TP
|
|
|
590d18 |
+\fB\-\-server\fR
|
|
|
590d18 |
+The hostname of Active Directory Domain Controller the winsync replication agreement is established with.
|
|
|
590d18 |
+.TP
|
|
|
590d18 |
+\fB\-\-unattended\fR
|
|
|
590d18 |
+Never prompts for user input.
|
|
|
590d18 |
--
|
|
|
590d18 |
2.4.3
|
|
|
590d18 |
|