|
 |
ac7d03 |
From 6534557508ba2ae7bda4ec2f2508d80dcef8297f Mon Sep 17 00:00:00 2001
|
|
|
ac7d03 |
From: Florence Blanc-Renaud <flo@redhat.com>
|
|
|
ac7d03 |
Date: Wed, 10 May 2017 18:04:52 +0200
|
|
|
ac7d03 |
Subject: [PATCH] ipa-kra-install manpage: document domain-level 1
|
|
|
ac7d03 |
|
|
|
ac7d03 |
ipa-kra-install man page was missing a specific section for domain level 1.
|
|
|
ac7d03 |
This commits also fixes a wrong option short name (for --log-file) and
|
|
|
ac7d03 |
indents the text corresponding to -p DM_PASSWORD
|
|
|
ac7d03 |
|
|
|
ac7d03 |
https://pagure.io/freeipa/issue/6922
|
|
|
ac7d03 |
|
|
|
ac7d03 |
Reviewed-By: Tomas Krizek <tkrizek@redhat.com>
|
|
|
ac7d03 |
---
|
|
|
ac7d03 |
install/tools/man/ipa-kra-install.1 | 17 ++++++++++++++---
|
|
|
ac7d03 |
1 file changed, 14 insertions(+), 3 deletions(-)
|
|
|
ac7d03 |
|
|
|
ac7d03 |
diff --git a/install/tools/man/ipa-kra-install.1 b/install/tools/man/ipa-kra-install.1
|
|
|
ac7d03 |
index 0aa9073c3303bd852627e430102ceb40575decc4..51afaac6474a9483e8c02bae605fe95994cce1f2 100644
|
|
|
ac7d03 |
--- a/install/tools/man/ipa-kra-install.1
|
|
|
ac7d03 |
+++ b/install/tools/man/ipa-kra-install.1
|
|
|
ac7d03 |
@@ -16,26 +16,37 @@
|
|
|
ac7d03 |
.\"
|
|
|
ac7d03 |
.\" Author: Ade Lee <alee@redhat.com>
|
|
|
ac7d03 |
.\"
|
|
|
ac7d03 |
-.TH "ipa-kra-install" "1" "Aug 24 2014" "FreeIPA" "FreeIPA Manual Pages"
|
|
|
ac7d03 |
+.TH "ipa-kra-install" "1" "May 10 2017" "FreeIPA" "FreeIPA Manual Pages"
|
|
|
ac7d03 |
.SH "NAME"
|
|
|
ac7d03 |
ipa\-kra\-install \- Install a KRA on a server
|
|
|
ac7d03 |
.SH "SYNOPSIS"
|
|
|
ac7d03 |
+.SS "DOMAIN LEVEL 0"
|
|
|
ac7d03 |
+.TP
|
|
|
ac7d03 |
ipa\-kra\-install [\fIOPTION\fR]... [replica_file]
|
|
|
ac7d03 |
+.SS "DOMAIN LEVEL 1"
|
|
|
ac7d03 |
+.TP
|
|
|
ac7d03 |
+ipa\-kra\-install [\fIOPTION\fR]...
|
|
|
ac7d03 |
.SH "DESCRIPTION"
|
|
|
ac7d03 |
Adds a KRA as an IPA\-managed service. This requires that the IPA server is already installed and configured, including a CA.
|
|
|
ac7d03 |
|
|
|
ac7d03 |
The KRA (Key Recovery Authority) is a component used to securely store secrets such as passwords, symmetric keys and private asymmetric keys. It is used as the back-end repository for the IPA Password Vault.
|
|
|
ac7d03 |
|
|
|
ac7d03 |
-ipa\-kra\-install can be run without replica_file to add KRA to the existing CA.
|
|
|
ac7d03 |
+In a domain at domain level 0, ipa\-kra\-install can be run without replica_file to add KRA to the existing CA, or with replica_file to install the KRA service on the replica.
|
|
|
ac7d03 |
ipa\-kra\-install will contact the CA to determine if a KRA has already been installed on another replica, and if so, will exit indicating that a replica_file is required.
|
|
|
ac7d03 |
|
|
|
ac7d03 |
The replica_file is created using the ipa\-replica\-prepare utility. A new replica_file should be generated on the master IPA server after the KRA has been installed and configured, so that the replica_file will contain the master KRA configuration and system certificates.
|
|
|
ac7d03 |
|
|
|
ac7d03 |
+In a domain at domain level 1, ipa\-kra\-install can be used to add KRA to the existing CA, or to install the KRA service on a replica, and does not require any replica file.
|
|
|
ac7d03 |
+
|
|
|
ac7d03 |
KRA can only be removed along with the entire server using ipa\-server\-install \-\-uninstall.
|
|
|
ac7d03 |
.SH "OPTIONS"
|
|
|
ac7d03 |
+.TP
|
|
|
ac7d03 |
\fB\-p\fR \fIDM_PASSWORD\fR, \fB\-\-password\fR=\fIDM_PASSWORD\fR
|
|
|
ac7d03 |
Directory Manager (existing master) password
|
|
|
ac7d03 |
.TP
|
|
|
ac7d03 |
+\fB\-\-no-host-dns\fR
|
|
|
ac7d03 |
+Do not use DNS for hostname lookup during installation
|
|
|
ac7d03 |
+.TP
|
|
|
ac7d03 |
\fB\-U\fR, \fB\-\-unattended\fR
|
|
|
ac7d03 |
An unattended installation that will never prompt for user input
|
|
|
ac7d03 |
.TP
|
|
|
ac7d03 |
@@ -45,7 +56,7 @@ Enable debug output when more verbose output is needed
|
|
|
ac7d03 |
\fB\-q\fR, \fB\-\-quiet\fR
|
|
|
ac7d03 |
Output only errors
|
|
|
ac7d03 |
.TP
|
|
|
ac7d03 |
-\fB\-v\fR, \fB\-\-log-file\fR=\fFILE\fR
|
|
|
ac7d03 |
+\fB\-\-log-file\fR=\fRFILE\fR
|
|
|
ac7d03 |
Log to the given file
|
|
|
ac7d03 |
.SH "EXIT STATUS"
|
|
|
ac7d03 |
0 if the command was successful
|
|
|
ac7d03 |
--
|
|
|
ac7d03 |
2.9.3
|
|
|
ac7d03 |
|