`ipa help topology` is improved.
--
Petr Vobornik
From 7fcaa87aab86d816ee6bc63a4bbaf5c65f4961d9 Mon Sep 17 00:00:00 2001
From: Petr Vobornik <pvobo...@redhat.com>
Date: Thu, 3 Dec 2015 16:29:27 +0100
Subject: [PATCH] Extend topology help
`ipa help topology` is improved.
---
ipalib/plugins/topology.py | 52 ++++++++++++++++++++++++++++++++++++++++++++--
1 file changed, 50 insertions(+), 2 deletions(-)
diff --git a/ipalib/plugins/topology.py b/ipalib/plugins/topology.py
index 40f9fa8038d4bcb6c0eeb82a37ac796d732b82fd..36330dee45738434266fd15d5e28167bdedb5a12 100644
--- a/ipalib/plugins/topology.py
+++ b/ipalib/plugins/topology.py
@@ -22,9 +22,57 @@ if six.PY3:
__doc__ = _("""
Topology
-Management of a replication topology.
+Management of a replication topology at domain level 1.
+""") + _("""
+IPA server's data is stored in LDAP server in two suffixes:
+* domain suffix, e.g., 'dc=example,dc=com', contains all domain related data
+* ca suffix, 'o=ipaca', is present only on server with CA installed. It
+ contains data for Certificate Server component
+""") + _("""
+Data stored on IPA servers is replicated to other IPA servers. The way it is
+replicated is defined by replication agreements. Replication agreements needs
+to be set for both suffixes separately. On domain level 0 they are managed
+using ipa-replica-manage and ipa-csreplica-manage tools. With domain level 1
+they are managed centrally using `ipa topology*` commands.
+""") + _("""
+Agreements are represented by topology segments. By default topology segment
+represents 2 replication agreements - one for each direction, e.g., A to B and
+B to A. Creation of unidirectional segments is not allowed.
+""") + _("""
+To verify if all servers are replicated with other servers use command:
+ ipa topologysuffix-verify $suffix
+""") + _("""
-Requires minimum domain level 1.
+Examples:
+ Find all IPA servers:
+ ipa server-find
+""") + _("""
+ Find all suffixes:
+ ipa topologysuffix-find
+""") + _("""
+ Add topology segment to 'domain' suffix:
+ ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B
+""") + _("""
+ Add topology segment to 'ca' suffix:
+ ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B
+""") + _("""
+ List all topology segments in 'domain' suffix:
+ ipa topologysegment-find domain
+""") + _("""
+ List all topology segments in 'ca' suffix:
+ ipa topologysegment-find ca
+""") + _("""
+ Delete topology segment in 'domain' suffix:
+ ipa topologysegment-del domain segment_name
+""") + _("""
+ Delete topology segment in 'ca' suffix:
+ ipa topologysegment-del ca segment_name
+""") + _("""
+ Verify topology of 'domain' suffix:
+ ipa topologysuffix-verify domain
+""") + _("""
+ Verify topology of 'ca' suffix:
+ ipa topologysuffix-verify ca
""")
register = Registry()
--
2.4.3
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
