[Freeipa-users] IPA V3 Backup and recovery

[Martin Kosek]

On 12/01/2014 05:46 AM, Eldo Joseph wrote:
> Thanks Guys :) 
> 
>> Date: Sat, 29 Nov 2014 12:24:12 -0500
>> From: rcritten at redhat.com
>> To: pvoborni at redhat.com; jeldo26 at live.com; freeipa-users at redhat.com
>> Subject: Re: [Freeipa-users] IPA V3 Backup and recovery
>>
>> Petr Vobornik wrote:
>>> On 11/28/2014 10:39 AM, Eldo Joseph wrote:
>>>> Hi All,
>>>> Can some one help me, with the best practices which can be used for
>>>> IPAV3 backup and recovery,  currently it is been a kind of single
>>>> point of failure.
>>>> Current infrastructure: One Master serverFive clients.
>>>> I've tried with db2bak and bak2db features, I was able for a
>>>> successful restore. how ever IPA admintools commands are failing with
>>>> this error.
>>>> (info): TGS_REQ (4 etypes {18 17 16 23}) xx.xx.xx.xx : PROCESS_TGS:
>>>> authtime 0,  <unknown client> for <unknown server>, Decrypt integrity
>>>> check failed
>>>> Thanks,Eldo.                         
>>>>
>>> Hello Eldo,
>>>
>>> sounds like: https://fedorahosted.org/freeipa/ticket/4726
>>>
>>> try to run:
>>>   sudo -u apache kdestroy
>>> after the restore
>>
>> You may also want to look at the design for backup and restore,
>> http://www.freeipa.org/page/V3/Backup_and_Restore . Quite a lot needs to
>> happen for a proper backup and restore, particularly since you have
>> multiple masters.
>>
>> rob

Also, some of our thoughts and strategies on Backup and Restore are in this
general article:

http://www.freeipa.org/page/Backup_and_Restore

HTH,
Martin