[Freeipa-devel] New/Updated FreeIPA design pages

[Martin Kosek]

On 12/18/2014 03:26 PM, Ludwig Krispenz wrote:
> 
>>> Hello,
>>>
>>> Domain level can only be increased. Can it interfere with the ability
>>> of the admin to downgrade a software version ?
>> Yes it will interfere, but the domain level will never be automatically
>> raised, so the admin has time to do tests for normal functionality, and
>> can wait to raise the domain level if there are reports of issues with
>> newer functionality.
> I think Thierry had the opposite direrction im mind. Everything is fine, the
> domain level is raised and then on one server the admin does a downgrade of
> ipa. Is this possible, what would happen ?

IPA does not support downgrades (AFAIK) - there is no ipa-ldap-downgrade
command. It may work, it may not work - you are on your own here.

Martin