NAME

       ipa-replica-conncheck - Check a replica-master network connection before installation

SYNOPSIS

       ipa-replica-conncheck [OPTION]...

DESCRIPTION

       When  an  IPA  replica is being installed a network connection between a replica machine and a replicated
       IPA master machine has to be prepared for master-replica communication. In case of  a  flawed  connection
       the  installation  may  fail  with  inconvenient  error  messages.  A  common  connection  problem  is  a
       misconfigured firewall with closed required port on a replica or master machine.

       The connection is checked by running a set of tests from both master and replica machines. The program is
       incorporated to ipa-replica-install(1) but can be also run separately.

OPTIONS

   REPLICA MACHINE OPTIONS
       This set of options is used when the connection check is run on a prepared IPA replica machine.

       -m MASTER, --master=MASTER
              Remote master machine address

       -a, --auto-master-check
              Automatically log in to master machine and execute the  master  machine  part  of  the  connection
              check. The following options for replica part are only evaluated when this option is set

       -r REALM, --realm=REALM
              The Kerberos realm name for the IPA server

       -k KDC, --kdc=KDC
              KDC server address. Defaults to MASTER

       -p PRINCIPAL, --principal=PRINCIPAL
              Authorized Kerberos principal to use to log in to master machine. Defaults to admin

       -w PASSWORD, --password=PASSWORD
              Password  for  given  principal.  The  password will be prompted interactively when this option is
              missing

   MASTER MACHINE OPTIONS
       This set of options is used when the connection check is run  on  a  master  machine  against  a  running
       ipa-replica-conncheck(1) on a replica machine.

       -R REPLICA, --replica=REPLICA
              Remote replica machine address

   COMMON OPTIONS
       -c, --check-ca
              Include  in  a check also a set of dogtag connection requirements. Only needed when the master was
              installed with Dogtag 9 or lower.

       -h HOSTNAME, --hostname=HOSTNAME
              The hostname of this server (FQDN). By default the result of getfqdn() call from  Python's  socket
              module is used.

       -d, --debug
              Print debugging information

       -q, --quiet
              Output only errors

EXAMPLES

       ipa-replica-conncheck -m master.example.com
              Run  a  replica  machine  connection  check  against  a  remote  master master.example.com. If the
              connection to the remote master machine is successful the program will switch  to  listening  mode
              and  prompt  for running the master machine part. The second part check the connection from master
              to replica.

       ipa-replica-conncheck -R replica.example.com
              Run a master machine connection check part. This is either run automatically by  replica  part  of
              the  connection  check  program  (when  -a  option is set) or manually by the user. A running ipa-
              replica-conncheck(1) in a listening mode must be already running on a replica machine.

       ipa-replica-conncheck -m master.example.com -a -r EXAMPLE.COM -w password
              Run  a  replica-master  connection  check.  In  case  of  a  success  switch  to  listening  mode,
              automatically  log  to  master.example.com in a realm EXAMPLE.COM with a password password and run
              the second part of the connection check.

EXIT STATUS

       0 if the connection check was successful

       1 if an error occurred

SEE ALSO

       ipa-replica-install(1)

FreeIPA                                            Jun 2 2011                           ipa-replica-conncheck(1)