[Freeipa-users] FreeIPA v4.2 stopped working, wants me to run ipa-server-upgrade, but has errors

[Martin Basti]

On 13.10.2016 15:54, John Popowitch wrote:
> Also, it seems like most of these conflicts are nearly identical.
> Which leads me to believe I should delete the duplicates.
> The URL you shared seems to talk about renaming and keeping the conflicting records.
> Should I rename them or remove them?

Make sure that there is exactly one right entry (from each set of 
conflicts), the best might be to rename one duplicated entry (DS will 
tell you if entry already exists as worst case) and remove other 
duplications.
Please note that memberOf attributes are generated dynamically so you 
don't need to change them it should be updated when you remove/update DN 
of entries.

Martin

>
> -----Original Message-----
> From: John Popowitch
> Sent: Thursday, October 13, 2016 8:50 AM
> To: 'Martin Basti'; Alexander Bokovoy
> Cc: freeipa-users at redhat.com
> Subject: RE: [Freeipa-users] FreeIPA v4.2 stopped working, wants me to run ipa-server-upgrade, but has errors
>
> Yeah, so very lucky.
> I have no idea how this happened.
> As I said before I inherited these servers so I don't really know what was done to get them to this state.
> I'm guessing most if not all of the conflicts are naming conflicts for standard entries which were setup on all three servers.
>
> Please help me to understand what this upgrade does.
> What does ipa-server-upgrade do?
> Each server has IPA RPMs for v4.2.0.
> Does this command upgrade RPMs?
> Does it need to be run on each server?
>
> Thanks for your help.
> -John
>
> -----Original Message-----
> From: Martin Basti [mailto:mbasti at redhat.com]
> Sent: Thursday, October 13, 2016 2:12 AM
> To: John Popowitch; Alexander Bokovoy
> Cc: freeipa-users at redhat.com
> Subject: Re: [Freeipa-users] FreeIPA v4.2 stopped working, wants me to run ipa-server-upgrade, but has errors
>
> Oh you are lucky to have ~150 replication conflicts :)
>
> How did you get those? Did you run upgrade in parallel or did you have some network issues?
>
>
> You have to manually fix all replication conflicts and the re-run ipa-server-upgrade
>
> Please follow guide I posted previously, sorry :(
>
>
> Martin
>