Currently running ipa-server-1.2.1-4 with fedora-ds-base-1.1.3-6. I attempted to upgrade to 389-ds-base-1.2.6.1-2 (and supporting packages) and the procedure took an extremely long time (at least 2 hours). There appears to be an upgrade script that runs as part of %posttrans which runs:
/usr/sbin/setup-ds.pl -l /dev/null -u -s General.UpdateMode=offline > /dev/null 2>&1 I don't have the error logs unfortunately, as when I reverted the ESX VM, I forgot to save off the log files, but what I recall was that there were messages indicating that there were multiple passes (each took about 4-5 minutes) and each time the rate of update dropped below a certain amount, the update would move on to the next "pass". There were about 25 passes through before the upgrade completed. Mind you, this installation is rather small IMO, as there are only 130-ish entries under cn=users,cn=accounts. The other thing that I noticed after the upgrade procedure was that not all the users were defined in the directory (most appeared to be there, but some critical users were missing). Suffices to say that many of our processes were broken after the upgrade and 4 hours into the planned upgrade, I ended up backing out. (This same upgrade had been tested on a smaller directory and the upgrade seemed to go without incident). I'm wondering if there might be an easier way for me to go about upgrading the installation. For example, could I, instead of going through the "upgrade", instead, re-install a replacement 389-ds based ipa-server host, create a new winsync agreement with my AD environment, and then export the password data for the users in DS from the current fedora-ds-base-1.1.3 and import it into the directory running 389-ds-base ? If this is do-able, what all do I need to copy from the fedora-ds-base host to the 389-ds-base host? Thanks Kambiz -- "All tyranny needs to gain a foothold is for people of good conscience to remain silent." --Thomas Jefferson _______________________________________________ Freeipa-users mailing list [email protected] https://www.redhat.com/mailman/listinfo/freeipa-users
