<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>Thanks Guys :) <br><br><div>> Date: Sat, 29 Nov 2014 12:24:12 -0500<br>> From: rcritten@redhat.com<br>> To: pvoborni@redhat.com; jeldo26@live.com; freeipa-users@redhat.com<br>> Subject: Re: [Freeipa-users] IPA V3 Backup and recovery<br>> <br>> Petr Vobornik wrote:<br>> > On 11/28/2014 10:39 AM, Eldo Joseph wrote:<br>> >> Hi All,<br>> >> Can some one help me, with the best practices which can be used for<br>> >> IPAV3 backup and recovery, currently it is been a kind of single<br>> >> point of failure.<br>> >> Current infrastructure: One Master serverFive clients.<br>> >> I've tried with db2bak and bak2db features, I was able for a<br>> >> successful restore. how ever IPA admintools commands are failing with<br>> >> this error.<br>> >> (info): TGS_REQ (4 etypes {18 17 16 23}) xx.xx.xx.xx : PROCESS_TGS:<br>> >> authtime 0, <unknown client> for <unknown server>, Decrypt integrity<br>> >> check failed<br>> >> Thanks,Eldo. <br>> >><br>> > Hello Eldo,<br>> > <br>> > sounds like: https://fedorahosted.org/freeipa/ticket/4726<br>> > <br>> > try to run:<br>> > sudo -u apache kdestroy<br>> > after the restore<br>> <br>> You may also want to look at the design for backup and restore,<br>> http://www.freeipa.org/page/V3/Backup_and_Restore . Quite a lot needs to<br>> happen for a proper backup and restore, particularly since you have<br>> multiple masters.<br>> <br>> rob<br>> <br></div> </div></body>
</html>