[Freeipa-users] Migrate IPA cluster F21 -> C7

[Bret Wortman]

I saw as I was working through it, and it's in fact what I did. 
Migrating the last server to CentOS right now.

Thanks for the help!


On 03/29/2017 09:53 AM, Rob Crittenden wrote:
> Bret Wortman wrote:
>> Never mind. Lost my mind.
>>
>> ipa-replica-install followed by ipa-ca-install appears to be the ticket.
> Or you can do it in one step by passing --setup-ca to ipa-replica-install
>
> rob
>
>>
>> Bret
>>
>>
>> On 03/29/2017 06:22 AM, Bret Wortman wrote:
>>> I've tried googling but keep coming up with beer recipes.
>>>
>>> How do you suggest adding the replica CA? I'm piecing together the
>>> options I want on my ipa-server-install command and am trying to
>>> understand the CA-related options.
>>>
>>> Thanks!
>>>
>>>
>>> Bret
>>>
>>>
>>>
>>> On 03/28/2017 08:45 AM, Bret Wortman wrote:
>>>> I'm studying the best way to migrate out IPA servers (there are two)
>>>> from F21 to C7. I _think_ the sequence of steps I need to perform is:
>>>>
>>>>      1. Build new C7 IPA server (ipa-c) and enable replication to it.
>>>>      2. Migrate CA functions from our existing CA server (ipa-a) to
>>>>      this new one (ipa-c).
>>>>      3. Upgrade ipa-b to C7 and enable replication to it.
>>>>      4. Either upgrade ipa-a and have a third ipa server or discard
>>>>      the vm in favor of the two now in service.
>>>>
>>>> Am I missing anything? Making this harder than it needs to be?
>>>>
>>>> Our F21 servers are using IPA 4.1.4-1 (and pki-ca 10.2.1-3) so I'm
>>>> not if replication across versions is supported between these and IPA
>>>> 4.4.0 (pki-ca 10.3.3).
>>>>
>>>>
>>>> -- 
>>>> *Bret Wortman*
>>>> Damascus Products
>>>> ph/fax: 1-855-644-2783
>>>> Wrap Buddies InDemand <wrapbuddies.co/store> at
>>>> http://bwortman.us/2ieQN4t
>>
>>