Merge pull request #1045 from xek/fix/OSPRH-19131-doc-tls-e-ipa-ssh

TLS-e migration fixes

Author: openshift-merge-bot[bot]

docs_user/modules/proc_migrating-tls-everywhere.adoc

@@ -25,14 +25,14 @@ You then decommission the previous FreeIPA node and no longer use it to issue ce
 +
 ifeval::["{build}" != "downstream"]
 ----
-IPA_SSH="ssh -i ~/install_yamls/out/edpm/ansibleee-ssh-key-id_rsa [email protected] podman exec -ti freeipa-server-container"
+IPA_SSH="ssh -i ~/install_yamls/out/edpm/ansibleee-ssh-key-id_rsa [email protected] podman exec -ti freeipa-server"
 ----
 +
 In this example the FreeIPA instance is running on a separate host, in a container.
 endif::[]
 ifeval::["{build}" == "downstream"]
 ----
-IPA_SSH="ssh -i <path_to_ssh_key> root@<freeipa-server-ip-address>"
+IPA_SSH="ssh -i <path_to_ssh_key> <admin user>@<freeipa-server-ip-address> sudo"
 ----
 endif::[]
 
@@ -43,7 +43,7 @@ ifeval::["{build_variant}" != "ospdo"]
 . To locate the CA certificate and key, list all the certificates inside your NSSDB:
 +
 ----
-$ IPA_SSH certutil -L -d /etc/pki/pki-tomcat/alias
+$IPA_SSH certutil -L -d /etc/pki/pki-tomcat/alias
 ----
 +
 * The `-L` option lists all certificates.
@@ -66,8 +66,7 @@ ifeval::["{build_variant}" == "ospdo"]
 . To locate the CA certificate and key, list all the certificates inside your NSSDB. If you installed OSPdO by using director-dev-tools, the server host runs the freeipa server as a container:
 +
 ----
-$ IPA_SSH certutil -L -d /etc/pki/pki-tomcat/alias
-$ IPA_SSH="podman exec -ti freeipa-server"
+$IPA_SSH certutil -L -d /etc/pki/pki-tomcat/alias
 ----
 +
 * The `-L` option lists all certificates.