<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">I didn’t see this guide until now. The IPA3 server started off as a RHEL 6.6 server so no upgrade is necessary, but I simply generated the replica file and created the IPA 4 server as a replica. Aside from the CA not being there the server looks to be working fine and shows up as a master. <div class=""><br class=""></div><div class="">I’ll uninstall the 4 server and work through the script process to see if that fixes the issue. <br class=""><div apple-content-edited="true" class="">
<span class="Apple-style-span" style="border-collapse: separate; border-spacing: 0px;"><div class=""><br class="Apple-interchange-newline">Regards,</div><div class="">------------------------------------------</div><div class="">Aric Wilisch</div><div class=""><a href="mailto:awilisch@gmail.com" class="">awilisch@gmail.com</a></div><div class=""><br class=""></div></span><br class="Apple-interchange-newline"><br class="Apple-interchange-newline">
</div>
<br class=""><div><blockquote type="cite" class=""><div class="">On Apr 13, 2015, at 7:47 PM, Dmitri Pal <<a href="mailto:dpal@redhat.com" class="">dpal@redhat.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class="">
<meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" class="">
<div bgcolor="#FFFFFF" text="#000000" class="">
<div class="moz-cite-prefix">On 04/13/2015 07:26 PM, Aric Wilisch
wrote:<br class="">
</div>
<blockquote cite="mid:AF9EE288-44CF-45E4-B1A5-F4F39F6DB6EE@gmail.com" type="cite" class="">
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1" class="">
One of our environments has a Freeipa3 sever installed and I need
to upgrade it to FreeIPA 4. I brought up RHEL 7 server and
installed FreeIPA 4 as a replica of the FreeIPA3 box. But now I’m
stuck. I can’t find any good documentation on how to promote the
new FreeIPA4 server and take the old FreeIPA3 server out of the
picture. If I do a ida-replica-manage del —force
stip01.staging.fioptics.int it tells me I can’t because it would
leave me without a CA. However I can’t find any documentation on
migrating the CA from IPA3 to IPA4.
<div class=""><br class="">
</div>
<div class="">Any help would be appreciated. <br class="">
<div apple-content-edited="true" class="">
<span class="Apple-style-span" style="border-collapse: separate; font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; border-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-stroke-width: 0px;">
<div class=""><br class="Apple-interchange-newline">
Regards,</div>
<div class="">------------------------------------------</div>
<div class="">Aric Wilisch</div>
<div class=""><a moz-do-not-send="true" href="mailto:awilisch@gmail.com" class="">awilisch@gmail.com</a></div>
<div class=""><br class="">
</div>
</span><br class="Apple-interchange-newline">
<br class="Apple-interchange-newline">
</div>
<br class="">
</div>
<br class="">
<fieldset class="mimeAttachmentHeader"></fieldset>
<br class="">
</blockquote>
<br class="">
<br class="">
Did you follow this procedure?<br class="">
<a class="moz-txt-link-freetext" href="https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html-single/Linux_Domain_Identity_Authentication_and_Policy_Guide/index.html#migrating-ipa-proc">https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html-single/Linux_Domain_Identity_Authentication_and_Policy_Guide/index.html#migrating-ipa-proc</a><br class="">
<br class="">
I would say that I would recommend upgrading to 6.6 rather than 6.5.<br class="">
<br class="">
If you did not what exactly did you do?<br class="">
<br class="">
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager IdM portfolio
Red Hat, Inc.</pre>
</div>
-- <br class="">Manage your subscription for the Freeipa-users mailing list:<br class=""><a href="https://www.redhat.com/mailman/listinfo/freeipa-users" class="">https://www.redhat.com/mailman/listinfo/freeipa-users</a><br class="">Go to http://freeipa.org for more info on the project</div></blockquote></div><br class=""></div></body></html>