Add installer/uninstaller for Global Catalog - Githubissues

abbra / freeipa

Mirror of FreeIPA, an integrated security information management solution

http://www.freeipa.org

GNU General Public License v3.0

2 stars 1 forks source link

Add installer/uninstaller for Global Catalog #17

Closed flo-renaud closed 4 years ago

flo-renaud commented 5 years ago

In order to install: /usr/libexec/ipa/gc/ipa-gc-install --gc-password -U

installs the global catalog as a dirsrv instance in /etc/dirsrv/slapd-GLOBAL-CATALOG
the instance has a cn=Directory Manager user with
the instance is listening on 3268 and 3269
for CA-less installs, specify --gc-cert-file --gc-pin

In order to uninstall: /usr/libexec/ipa/ipa-gc-install --uninstall -U

removes the instance

The installation creates an entry cn=GLOBAL-CATALOG,cn=,cn=masters,cn=ipa,cn=etc, which means that ipactl start/ipactl stop also starts/stops the GC.