Thanks, but that documentation is inconsistent.
Section 8.1.1 advises upgrading one version of RedHat IDM at a time. Fair dos.
However section 8.1.2 advises running "
yum update ipa-*" which will update to the latest version of IPA available in the repo, which may well be a jump of several IPA versions.Despite lots of googling, I have not found anything mapping RHEL releases to IPA releases (a support matrix). The release pages on the FreeIPA.org site do generally mention a target Fedora version. e.g. https://www.freeipa.org/page/Releases/4.2.0
If the expert advice is to update IDM by updating the underlying RHEL one version at at time, then maybe the update should be performed via something like:
"yum --releasever=7.3 update"
----- Original message -----
From: Alexander Bokovoy <[email protected]>
To: Christopher Lamb <[email protected]>
Cc:
Subject: Re: [Freeipa-users] Re: Configuring SSL Ciphers for FreeIPA / DogTag on port 8443
Date: Wed, Mar 13, 2019 4:15 PM
On ke, 13 maalis 2019, Christopher Lamb wrote:
>On a OEL 7.2 I did "yum update ipa-server".
>
>From Alexander's and Rob's posts, I now guess this is "not recommended",
>and that instead I should have upgraded all of OEL 7.2 to 7.6.
>
>In the FreeIPA documentation I can't find anything saying that I should
>not upgrade as I did, nor can I find any RHEL / IPA version support
>matrix.
From 8.1.1. Considerations for Updating Identity Management of
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html-single/linux_domain_identity_authentication_and_policy_guide/#update-ipa-prereqs
-------
Red Hat recommends upgrading to the next version only. For example, if
you want to upgrade to Identity Management for Red Hat Enterprise Linux
7.4, we recommend upgrading from Identity Management for Red Hat
Enterprise Linux 7.3. Upgrading from earlier versions can cause
problems.
-------
This implies you would need to be at RHEL 7.5 to upgrade to RHEL 7.6.
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland
_______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected]
