mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-02-25 18:55:28 -06:00
083c6aedc6
Add the ipa-acme-manage command which can be used to enable or disable the IPA ACME service. It must be used on each server. In the future we will implement deployment-wide configuration (including enable/disable) of the ACME service via IPA API, with configuration stored in and replicated by LDAP. But until then, we need a simple command for administrators to use. Part of: https://pagure.io/freeipa/issue/4751 Reviewed-By: Rob Crittenden <rcritten@redhat.com>
34 lines
941 B
Groff
34 lines
941 B
Groff
.\"
|
|
.\" Copyright (C) 2020 FreeIPA Contributors see COPYING for license
|
|
.\"
|
|
.TH "ipa-acme-manage" "1" "Jun 2 2020" "FreeIPA" "FreeIPA Manual Pages"
|
|
.SH "NAME"
|
|
ipa\-acme\-manage \- Manage the FreeIPA ACME service
|
|
.SH "SYNOPSIS"
|
|
ipa\-acme\-manage enable|disable
|
|
.SH "DESCRIPTION"
|
|
|
|
Use the \fIipa-acme-manage\fR command to enable or disable the ACME
|
|
service on a FreeIPA CA server.
|
|
|
|
In a FreeIPA topology all CA servers capable of ACME will
|
|
have the ACME service deployed. The service is not enabled
|
|
by default. It is expected that the ACME service will either be
|
|
enabled on all CA servers, or disabled on all CA servers. However
|
|
it must be enabled or disabled on each individual server.
|
|
|
|
.SH "COMMANDS"
|
|
.TP
|
|
\fBenable\fR
|
|
Enable the ACME service on this host.
|
|
.TP
|
|
\fBdisable\fR
|
|
Disable the ACME service on this host.
|
|
|
|
.SH "EXIT STATUS"
|
|
0 if the command was successful
|
|
|
|
1 if the host is not a CA server
|
|
|
|
2 if the host is not a FreeIPA server
|