Re: [Freeipa-users] Add CA server AFTER install?

2016-04-25 Thread Rob Crittenden

Zak Wolfinger wrote:

Not having much luck with the docs / Google.  Is there a way to add the
CA server role to a FreeIPA installation if it wasn’t included at the
time of install?


Too quick on the draw...

It isn't clear what you mean. ipa-ca-install can add a CA to a master 
installed using ipa-replica-install.


If you installed as CA-less then I'd look at 
http://www.freeipa.org/page/V4/CA-less_to_CA-full_conversion It is 
rather thin on details unfortunately but it looks like you can just run 
ipa-ca-install in this case as well.


rob

--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project


Re: [Freeipa-users] Add CA server AFTER install?

2016-04-25 Thread Rob Crittenden

Zak Wolfinger wrote:

Not having much luck with the docs / Google.  Is there a way to add the
CA server role to a FreeIPA installation if it wasn’t included at the
time of install?

Thanks!





ipa-ca-install

rob

--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project