I didn’t see this guide until now. The IPA3 server started off as a RHEL 6.6 server so no upgrade is necessary, but I simply generated the replica file and created the IPA 4 server as a replica. Aside from the CA not being there the server looks to be working fine and shows up as a master.
I’ll uninstall the 4 server and work through the script process to see if that fixes the issue. Regards, ------------------------------------------ Aric Wilisch [email protected] > On Apr 13, 2015, at 7:47 PM, Dmitri Pal <[email protected]> wrote: > > On 04/13/2015 07:26 PM, Aric Wilisch wrote: >> One of our environments has a Freeipa3 sever installed and I need to upgrade >> it to FreeIPA 4. I brought up RHEL 7 server and installed FreeIPA 4 as a >> replica of the FreeIPA3 box. But now I’m stuck. I can’t find any good >> documentation on how to promote the new FreeIPA4 server and take the old >> FreeIPA3 server out of the picture. If I do a ida-replica-manage del —force >> stip01.staging.fioptics.int it tells me I can’t because it would leave me >> without a CA. However I can’t find any documentation on migrating the CA >> from IPA3 to IPA4. >> >> Any help would be appreciated. >> >> Regards, >> ------------------------------------------ >> Aric Wilisch >> [email protected] <mailto:[email protected]> >> >> >> >> >> >> > > > Did you follow this procedure? > https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html-single/Linux_Domain_Identity_Authentication_and_Policy_Guide/index.html#migrating-ipa-proc > > <https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html-single/Linux_Domain_Identity_Authentication_and_Policy_Guide/index.html#migrating-ipa-proc> > > I would say that I would recommend upgrading to 6.6 rather than 6.5. > > If you did not what exactly did you do? > > -- > Thank you, > Dmitri Pal > > Sr. Engineering Manager IdM portfolio > Red Hat, Inc. > -- > Manage your subscription for the Freeipa-users mailing list: > https://www.redhat.com/mailman/listinfo/freeipa-users > Go to http://freeipa.org for more info on the project
-- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
