freeipa

#5831 ipa-ca-install man page has misleading information
Closed: fixed Opened by tscherf.

Closed: fixed
Reopen Issue

When you run "ipa-ca-install" without the replica file, you get the following misleading information:

CA is already installed.

When I run the same tool with the replica file, it works ok. In the man page we say though that the replica file is optional:

"""
SYNOPSIS
ipa-ca-install [OPTION]... [replica_file]

Alternatively, you can run ipa-ca-install without replica_file to upgrade from CA-less to CA-full.
"""

We should either fix the man page to make the replica file a requirement or change the ipa-ca-install to to setup a new CA with new key material which then doesn't require a replica file.

what version of IPA?

4.2 (RHEL-7.2 release)

The behavior probably changed since 4.2.

Also ipa-ca-install man page doesn't contain any mention of domain levels, would fix in 4.4/4.3.2

4.3.2 was released, moving to 4.3.3

Metadata Update from @tscherf:
- Issue assigned to someone
- Issue set to the milestone: FreeIPA 4.3.3

4.3.x EOL

Metadata Update from @mbasti:
- Issue close_status updated to: None
- Issue set to the milestone: FreeIPA 4.4.5 (was: FreeIPA 4.3.3)

Metadata Update from @frenaud:
- Issue assigned to frenaud (was: someone)

Metadata Update from @frenaud:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/678 (was: 0)

master:

  • b96a942cdca09496be9f911499036bee60084aee ipa-ca-install man page: Add domain level 1 help

ipa-4-4:

  • 1734e143582843ef1d397a4929687b1068bdf413 ipa-ca-install man page: Add domain level 1 help

ipa-4-5:

  • 262723b1be894e5d75cccdd92da838f544a3b222 ipa-ca-install man page: Add domain level 1 help

Metadata Update from @mbasti:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
Normal
https://github.com/freeipa/freeipa/pull/678
defect
Man pages
0
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.