[Freeipa-users] FreeIPA 4.1 -> 4.2 replica upgrade process

[Martin Kosek]

On 11/30/2015 01:32 PM, Andreas Calminder wrote:
> Great, thanks!
> I'll just go ahead and yum update then :).

I would just recommend to upgrade one-by-one, to avoid replication conflicts if
multiple masters add the same entries in the tree in the same time.

> On 11/30/2015 11:58 AM, Martin Basti wrote:
>>
>>
>> On 30.11.2015 10:12, Andreas Calminder wrote:
>>> Hello!
>>> This might be trivial but I want to double check the preferred way of
>>> upgrading my ipa environment, I have 3 servers (Running Rhel 7.1, ipa 4.1),
>>> 1 acting as master with a ca (external certificate), the replicas are also
>>> ca's, they're only syncing to and from the master, unaware of each other.
>>> The replicas handle all client requests. The master also run a one-way
>>> winsync agreement with one of our active directory servers.
>>>
>>> For some reason I think that I should start by upgrading the replicas and
>>> upgrade the master last, but I don't know why, I might have read it in
>>> somewhere, long ago. Is this the preferred way, does order even matter? The
>>> documentation just says /yum update ipa-server/ which seems easy enough, but
>>> I'd rather double check.
>>>
>>> Best regards,
>>> Andreas
>>>
>> Hello,
>>
>> replicas and master are equal, so it should not matter which is upgraded as
>> first.
>>
>> Martin
>