Ty zang via FreeIPA-users wrote:
> Hello all,
> 
> Hope everyone is good. I have a FreeIPA server on my network, installed on 
> Oracle Linux 7 (EOL). I have ~30 servers joined to that instance, and that 
> instance has a trust with my Active Directory. This allows users to 
> authenticate to my servers using their AD accounts. I also have some POSIX 
> groups which are "glued" to external groups (AD groups). I use the UID and 
> GID Number field in AD to make this all translate properly.
> 
> It has come time to finally replace that server with the newer OS (8 for 
> now). I am trying to understand my options and the least disruptive path 
> forward. The previous admin who installed/configured everything took the 
> approach of standing up a brand new freeIPA domain, exporting flat files out 
> of the old one, importing into the new one, and then (I assume) rejoining the 
> servers.
> 
> Is there another way, say maybe setting up a slave server and transferring 
> roles? Or is there a good guide/document that talks about how to migrate the 
> FreeIPA server?
> 

https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/8#Identity%20Management

rob

-- 
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to