ipa-replica-conncheck(1) [centos man page]

ipa-replica-conncheck(1)					 IPA Manual Pages					  ipa-replica-conncheck(1)

NAME

       ipa-replica-conncheck - Check a replica-master network connection before installation

SYNOPSIS

       ipa-replica-conncheck [OPTION]...

DESCRIPTION

       When  an  IPA  replica is being installed a network connection between a replica machine and a replicated IPA master machine has to be pre-
       pared for master-replica communication. In case of a flawed connection the installation may fail with inconvenient error messages. A common
       connection problem is a misconfigured firewall with closed required port on a replica or master machine.

       The  connection	is  checked  by  running  a  set  of  tests  from  both  master  and  replica  machines.  The  program	is incorporated to
       ipa-replica-install(1) but can be also run separately.

OPTIONS

   REPLICA MACHINE OPTIONS
       This set of options is used when the connection check is run on a prepared IPA replica machine.

       -m MASTER, --master=MASTER
	      Remote master machine address

       -a, --auto-master-check
	      Automatically log in to master machine and execute the master machine part of  the  connection  check.  The  following  options  for
	      replica part are only evaluated when this option is set

       -r REALM, --realm=REALM
	      The Kerberos realm name for the IPA server

       -k KDC, --kdc=KDC
	      KDC server address. Defaults t MASTER

       -p PRINCIPAL, --principal=PRINCIPAL
	      Authorized Kerberos principal to use to log in to master machine. Defaults to admin

       -w PASSWORD, --password=PASSWORD
	      Password for given principal. The password will be prompted interactively when this option is missing

   MASTER MACHINE OPTIONS
       This  set  of  options is used when the connection check is run on a master machine against a running ipa-replica-conncheck(1) on a replica
       machine.

       -R REPLICA, --replica=REPLICA
	      Remote replica machine address

   COMMON OPTIONS
       -c, --check-ca
	      Include in a check also a set of dogtag connection requirements. Only needed when the master was installed with Dogtag 9 or lower.

       -h HOSTNAME, --hostname=HOSTNAME
	      The hostname of this server (FQDN). By default a nodename from uname(2) is used

       -d, --debug
	      Print debugging information

       -q, --quiet
	      Output only errors

EXAMPLES

       ipa-replica-conncheck -m master.example.com
	      Run a replica machine connection check against a remote master master.example.com. If the connection to the remote master machine is
	      successful  the program will switch to listening mode and prompt for running the master machine part. The second part check the con-
	      nection from master to replica.

       ipa-replica-conncheck -R replica.example.com
	      Run a master machine connection check part. This is either run automatically by replica part of the connection check  program  (when
	      -a  option  is  set)  or	manually  by the user. A running ipa-replica-conncheck(1) in a listening mode must be already running on a
	      replica machine.

       ipa-replica-conncheck -m master.example.com -a -r EXAMPLE.COM -w password
	      Run a replica-master connection check. In case of a success switch to listening mode, automatically log to master.example.com  in  a
	      realm EXAMPLE.COM with a password password and run the second part of the connection check.

EXIT STATUS

       0 if the connection check was successful

       1 if an error occurred

SEE ALSO

       ipa-replica-install(1)

IPA
								    Jun 2 2011						  ipa-replica-conncheck(1)

Check Out this Related Man Page

ipa-replica-prepare(1)						 IPA Manual Pages					    ipa-replica-prepare(1)

NAME

       ipa-replica-prepare - Create an IPA replica file

SYNOPSIS

       ipa-replica-prepare [OPTION]... hostname

DESCRIPTION

       Generates a replica file that may be used with ipa-replica-install to create a replica of an IPA server.

       A replica can only be created on an IPA server installed with ipa-server-install (the first server).

       You  must  provide  the fully-qualified hostname of the machine you want to install the replica on and a host-specific replica_file will be
       created. It is host-specific because SSL server certificates are generated as part of the process and they are  specific  to  a	particular
       hostname.

       If IPA manages the DNS for your domain, you should either use the --ip-address option or add the forward and reverse records manually using
       IPA plugins.

       Once the file has been created it will be named replica-hostname. This file can then be moved across the network to the target machine  and
       a new IPA replica setup by running ipa-replica-install replica-hostname.

       A replica should only be installed on the same or higher version of IPA on the remote system.

OPTIONS

       --dirsrv_pkcs12=FILE
	      PKCS#12 file containing the Directory Server SSL Certificate and Private Key

       --http_pkcs12=FILE
	      PKCS#12 file containing the Apache Server SSL Certificate and Private Key

       --dirsrv_pin=DIRSRV_PIN
	      The password of the Directory Server PKCS#12 file

       --http_pin=HTTP_PIN
	      The password of the Apache Server PKCS#12 file

       -p DM_PASSWORD, --password=DM_PASSWORD
	      Directory Manager (existing master) password

       --ip-address=IP_ADDRESS
	      IP address of the replica server. If you provide this option, the A and PTR records will be added to the DNS.

       --reverse-zone=REVERSE_ZONE
	      The reverse DNS zone to use

       --no-reverse
	      Do not create reverse DNS zone

       --ca=CA_FILE
	      Location of CA PKCS#12 file, default /root/cacert.p12

       --debug
	      Prints info log messages to the output

EXIT STATUS

       0 if the command was successful

       1 if an error occurred

IPA
								    Mar 14 2008 					    ipa-replica-prepare(1)

Linux and UNIX Man Pages

ipa-replica-conncheck(1) [centos man page]

Check Out this Related Man Page