[Freeipa-users] FreeIPA v4.2 stopped working, wants me to run ipa-server-upgrade, but has errors

[John Popowitch]

Thanks so much for your help, Martin, and Alexander for keeping me honest.
I think I have enough to start working on resolving the replication conflicts.
I'm sure I'll have more questions, but this is definitely the right place to get them answered.

-----Original Message-----
From: Martin Basti [mailto:mbasti at redhat.com] 
Sent: Thursday, October 13, 2016 9:36 AM
To: John Popowitch; Alexander Bokovoy
Cc: freeipa-users at redhat.com
Subject: Re: [Freeipa-users] FreeIPA v4.2 stopped working, wants me to run ipa-server-upgrade, but has errors



On 13.10.2016 15:54, John Popowitch wrote:
> Also, it seems like most of these conflicts are nearly identical.
> Which leads me to believe I should delete the duplicates.
> The URL you shared seems to talk about renaming and keeping the conflicting records.
> Should I rename them or remove them?

Make sure that there is exactly one right entry (from each set of conflicts), the best might be to rename one duplicated entry (DS will tell you if entry already exists as worst case) and remove other duplications.
Please note that memberOf attributes are generated dynamically so you don't need to change them it should be updated when you remove/update DN of entries.

Martin

>
> -----Original Message-----
> From: John Popowitch
> Sent: Thursday, October 13, 2016 8:50 AM
> To: 'Martin Basti'; Alexander Bokovoy
> Cc: freeipa-users at redhat.com
> Subject: RE: [Freeipa-users] FreeIPA v4.2 stopped working, wants me to 
> run ipa-server-upgrade, but has errors
>
> Yeah, so very lucky.
> I have no idea how this happened.
> As I said before I inherited these servers so I don't really know what was done to get them to this state.
> I'm guessing most if not all of the conflicts are naming conflicts for standard entries which were setup on all three servers.
>
> Please help me to understand what this upgrade does.
> What does ipa-server-upgrade do?
> Each server has IPA RPMs for v4.2.0.
> Does this command upgrade RPMs?
> Does it need to be run on each server?
>
> Thanks for your help.
> -John
>
> -----Original Message-----
> From: Martin Basti [mailto:mbasti at redhat.com]
> Sent: Thursday, October 13, 2016 2:12 AM
> To: John Popowitch; Alexander Bokovoy
> Cc: freeipa-users at redhat.com
> Subject: Re: [Freeipa-users] FreeIPA v4.2 stopped working, wants me to 
> run ipa-server-upgrade, but has errors
>
> Oh you are lucky to have ~150 replication conflicts :)
>
> How did you get those? Did you run upgrade in parallel or did you have some network issues?
>
>
> You have to manually fix all replication conflicts and the re-run 
> ipa-server-upgrade
>
> Please follow guide I posted previously, sorry :(
>
>
> Martin
>