<div dir="ltr">Most of the clients in my env are centos 6.6 with ipa 3.0.0 client installed. I if bring up a replica on centos 7.2 with ipa 4.2.3 server and then start phasing out the older 3.0.0 servers. Will the client that are still running the older client software still work?</div><div class="gmail_extra"> <div class="gmail_quote">On Fri, Nov 20, 2015 at 4:31 AM, Martin Kosek <<a href="mailto:mkosek@redhat.com" target="_blank">mkosek@redhat.com</a>> wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On 11/19/2015 11:03 PM, Ash Alam wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> Hello All I am looking for some advice on upgrading. Currently our FreeIPA servers are 3.0.0 on centos 6.6. We are looking to go to 4.2.3 Centos7. This upgrade path is not possible per IPA documentation. Minimum version required is 3.3.x. I have also found that cenos6 does not provide anything past 3.0.0. </blockquote> And it won't. There are no plans in updating FreeIPA version in RHEL/CentOS-6.x, we encourage people who want the new features to migrate to RHEL-7.x: <a href="http://www.freeipa.org/page/Howto/Migration#Migrating_Identity_Management_in_RHEL.2FCentOS" rel="noreferrer" target="_blank">http://www.freeipa.org/page/Howto/Migration#Migrating_Identity_Management_in_RHEL.2FCentOS</a> <a href="https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Linux_Domain_Identity_Authentication_and_Policy_Guide/upgrading.html#migrating-ipa-proc" rel="noreferrer" target="_blank">https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Linux_Domain_Identity_Authentication_and_Policy_Guide/upgrading.html#migrating-ipa-proc</a> If you want to wait on CentOS-7.2, it should be in works now: <a href="http://seven.centos.org/2015/11/rhel-7-2-released-today/" rel="noreferrer" target="_blank">http://seven.centos.org/2015/11/rhel-7-2-released-today/</a> <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> One idea is to upgrade to 3.3.x first and then upgrade to 4.2.3 on centos7. This is harder since centos does not provide this. The other issue is if 3.0/3.3 client will be supported with 4.2.3 server. </blockquote> The right way is to migrate via creating replicas in RHEL/CentOS-7.x and slowly deprecating RHEL/CentOS-6 ones. Detailed procedure in the links above. </blockquote></div> </div>