From 891cced446db0514bfe85c94c014ade32deb6cae Mon Sep 17 00:00:00 2001 From: Florence Blanc-Renaud Date: Wed, 6 Dec 2017 17:26:24 +0100 Subject: [PATCH] Improve help message for ipa trust-add --range-type Add the correct procedure for re-running ipa trust-add with a different range type. Fixes: https://pagure.io/freeipa/issue/7308 Reviewed-By: Christian Heimes --- ipaserver/plugins/trust.py | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/ipaserver/plugins/trust.py b/ipaserver/plugins/trust.py index 0ef290ce6..baf76ae88 100644 --- a/ipaserver/plugins/trust.py +++ b/ipaserver/plugins/trust.py @@ -656,6 +656,11 @@ Only trusts to Active Directory domains are supported right now. The command can be safely run multiple times against the same domain, this will cause change to trust relationship credentials on both sides. + +Note that if the command was previously run with a specific range type, +or with automatic detection of the range type, and you want to configure a +different range type, you may need to delete first the ID range using +ipa idrange-del before retrying the command with the desired range type. ''') range_types = {