[Freeipa-users] Migrate IPA cluster F21 -> C7
Rob Crittenden
rcritten at redhat.com
Tue Mar 28 13:15:39 UTC 2017
Bret Wortman wrote:
> I'm studying the best way to migrate out IPA servers (there are two)
> from F21 to C7. I _think_ the sequence of steps I need to perform is:
>
> 1. Build new C7 IPA server (ipa-c) and enable replication to it.
> 2. Migrate CA functions from our existing CA server (ipa-a) to this
> new one (ipa-c).
> 3. Upgrade ipa-b to C7 and enable replication to it.
> 4. Either upgrade ipa-a and have a third ipa server or discard the
> vm in favor of the two now in service.
>
> Am I missing anything? Making this harder than it needs to be?
>
> Our F21 servers are using IPA 4.1.4-1 (and pki-ca 10.2.1-3) so I'm not
> if replication across versions is supported between these and IPA 4.4.0
> (pki-ca 10.3.3).
This looks fine. I'd ensure there are at least 2 IPA Masters installed
with a CA in order to avoid a single point of failure.
rob
More information about the Freeipa-users
mailing list