[Freeipa-users] Upgrading from 3.0.0 CentOS6 to 4.2.3 CentOS7

[Endi Sukma Dewata]

On 1/28/2016 2:45 PM, Endi Sukma Dewata wrote:
> Hi,
>
> If you're cloning from an IPA running on RHEL/CentOS 6 with CA signed by another CA you are likely hitting this issue:
> https://bugzilla.redhat.com/show_bug.cgi?id=1291747
>
> The bug has been fixed in this package: pki-ca-9.0.3-45. You'll need to install it on the master, then restart the server, then try cloning again.
>
> The latest PKI available on RHEL/CentOS 7 is version 10.2.5, but it's patched with relevant bug fixes from newer versions.
>
> If you're still having a problem, try enabling the debug log on the master and clone by setting the following property in CS.cfg:
> debug.level=1
>
> See also: http://pki.fedoraproject.org/wiki/PKI_Server_Logs
>
> --
> Endi S. Dewata

Just a note, I believe the fix is already available on CentOS 6:
http://mirror.centos.org/centos/6.7/updates/x86_64/Packages/

-- 
Endi S. Dewata