Update and package ipa-upgradeconfig man page.

Require that the tool be run as root to avoid a permission-related
backtrace.

https://fedorahosted.org/freeipa/ticket/1758

freeipa.spec.in

@@ -564,6 +564,7 @@ fi
 %{_mandir}/man1/ipa-managed-entries.1.gz
 %{_mandir}/man1/ipa-ldap-updater.1.gz
 %{_mandir}/man8/ipactl.8.gz
+%{_mandir}/man8/ipa-upgradeconfig.8.gz
 %{_mandir}/man1/ipa-compliance.1.gz
 
 %files server-selinux

install/tools/ipa-upgradeconfig

@@ -164,6 +164,9 @@ def main():
     exit gracefully.
     """
 
+    if not os.geteuid()==0:
+        sys.exit("\nYou must be root to run this script.\n")
+
     try:
         krbctx = krbV.default_context()
     except krbV.Krb5Error, e:

install/tools/man/Makefile.am

@@ -23,6 +23,7 @@ man1_MANS = 				\
 
 man8_MANS =				\
 	ipactl.8			\
+	ipa-upgradeconfig.8		\
         $(NULL)
 
 install-data-hook:

install/tools/man/ipa-upgradeconfig.8

@@ -26,7 +26,9 @@ A tool to update the IPA Apache configuration during an upgrade.
 
 It examines the VERSION value in the head of \fI/etc/httpd/conf.d/ipa.conf\fR and \fI/etc/httpd/conf.d/ipa\-rewrite.conf\fR and compares this with the templates. If an update is needed then new files are written.
 
-This is not intended to be run by an end\-user. It is executed when the IPA rpms are upgraded.
+It also will convert a CA configured to be accessible via ports 9443, 9444, 9445 and 9446 to be proxied by the IPA web server on ports 80 and 443.
+
+This is not intended to be run by an end\-user. It is executed when the IPA rpms are upgraded. This must be run as the root user.
 .SH "EXIT STATUS"
 0 if the update was successful or there was nothing to do