Hello all,

Hope everyone is good. I have a FreeIPA server on my network, installed on 
Oracle Linux 7 (EOL). I have ~30 servers joined to that instance, and that 
instance has a trust with my Active Directory. This allows users to 
authenticate to my servers using their AD accounts. I also have some POSIX 
groups which are "glued" to external groups (AD groups). I use the UID and GID 
Number field in AD to make this all translate properly.

It has come time to finally replace that server with the newer OS (8 for now). 
I am trying to understand my options and the least disruptive path forward. The 
previous admin who installed/configured everything took the approach of 
standing up a brand new freeIPA domain, exporting flat files out of the old 
one, importing into the new one, and then (I assume) rejoining the servers.

Is there another way, say maybe setting up a slave server and transferring 
roles? Or is there a good guide/document that talks about how to migrate the 
FreeIPA server?
-- 
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to