Hi,

On Wed, May 10, 2023 at 12:03 AM John Burns via FreeIPA-users <
[email protected]> wrote:

> Greetings!
>
> Can the actions within the two commands below can be done manually
> (outside the RPM)?
>
> ipa-crlgen-manage status
> ipa-crlgen-manage disable
>

You can refer to
https://www.freeipa.org/page/Howto/Promote_CA_to_Renewal_and_CRL_Master
HTH,
flo

>
> Context: I inherited an old Centos IPA cluster, centered on VMs.
> Suboptimal, given that the VM datastore itself is NFS-shared. Bare metal
> hardware is in place, running RHEL IPA. The "ipa-crlgen-manage" is actually
> not present on the running ipa-server-4.X) but is on a later version. Yes,
> I could run "yum update" and restart; but this VM can't go down until 1)
> offloading the last crucial functions to the bare metal 2) removing it from
> topology. There is limited opportunity to confirm things don't break after
> that update.
>
> Thanks for any leads.
> _______________________________________________
> FreeIPA-users mailing list -- [email protected]
> To unsubscribe send an email to [email protected]
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedorahosted.org/archives/list/[email protected]
> Do not reply to spam, report it:
> https://pagure.io/fedora-infrastructure/new_issue
>
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to