1ipa-replica-install(1) FreeIPA Manual Pages ipa-replica-install(1)
2
3
4
6 ipa-replica-install - Create an IPA replica
7
9 ipa-replica-install [OPTION]... replica_file
10
12 Configures a new IPA server that is a replica of the server that gener‐
13 ated it. Once it has been created it is an exact copy of the original
14 IPA server and is an equal master. Changes made to any master are auto‐
15 matically replicated to other masters.
16
17 The replica_file is created using the ipa-replica-prepare utility.
18
19 If the installation fails you may need to run ipa-server-install
20 --uninstall before running ipa-replica-install again.
21
22 The installation will fail if the host you are installing the replica
23 on exists as a host in IPA or an existing replication agreement exists
24 (for example, from a previously failed installation).
25
26 A replica should only be installed on the same or higher version of IPA
27 on the remote system.
28
30 BASIC OPTIONS
31 --setup-ca
32 Install and configure a CA on this replica. If a CA is not con‐
33 figured then certificate operations will be forwarded to a mas‐
34 ter with a CA installed.
35
36 --ip-address=IP_ADDRESS
37 The IP address of this server. If this address does not match
38 the address the host resolves to and --setup-dns is not selected
39 the installation will fail. If the server hostname is not
40 resolvable, a record for the hostname and IP_ADDRESS is added to
41 /etc/hosts.
42
43 -p DM_PASSWORD, --password=DM_PASSWORD
44 Directory Manager (existing master) password
45
46 -w ADMIN_PASSWORD, --admin-password=ADMIN_PASSWORD
47 Admin user Kerberos password used for connection check
48
49 -N, --no-ntp
50 Do not configure NTP
51
52 --no-ui-redirect
53 Do not automatically redirect to the Web UI.
54
55 --ssh-trust-dns
56 Configure OpenSSH client to trust DNS SSHFP records.
57
58 --no-ssh
59 Do not configure OpenSSH client.
60
61 --no-sshd
62 Do not configure OpenSSH server.
63
64 --skip-conncheck
65 Skip connection check to remote master
66
67 -d, --debug
68 Enable debug logging when more verbose output is needed
69
70 -U, --unattended
71 An unattended installation that will never prompt for user input
72
73
74 DNS OPTIONS
75 --setup-dns
76 Generate a DNS zone if it does not exist already and configure
77 the DNS server. This option requires that you either specify at
78 least one DNS forwarder through the --forwarder option or use
79 the --no-forwarders option.
80
81 --forwarder=IP_ADDRESS
82 Add a DNS forwarder to the DNS configuration. You can use this
83 option multiple times to specify more forwarders, but at least
84 one must be provided, unless the --no-forwarders option is spec‐
85 ified.
86
87 --no-forwarders
88 Do not add any DNS forwarders. Root DNS servers will be used
89 instead.
90
91 --reverse-zone=REVERSE_ZONE
92 The reverse DNS zone to use
93
94 --no-reverse
95 Do not create new reverse DNS zone. If a reverse DNS zone
96 already exists for the subnet, it will be used.
97
98 --no-host-dns
99 Do not use DNS for hostname lookup during installation
100
101 --no-dns-sshfp
102 Do not automatically create DNS SSHFP records.
103
104
106 0 if the command was successful
107
108 1 if an error occurred
109
110 3 if the host exists in the IPA server or a replication agreement to
111 the remote master already exists
112
113
114
115FreeIPA May 16 2012 ipa-replica-install(1)