On 12/01/2014 05:46 AM, Eldo Joseph wrote: > Thanks Guys :) > >> Date: Sat, 29 Nov 2014 12:24:12 -0500 >> From: rcrit...@redhat.com >> To: pvobo...@redhat.com; jeld...@live.com; freeipa-users@redhat.com >> Subject: Re: [Freeipa-users] IPA V3 Backup and recovery >> >> Petr Vobornik wrote: >>> On 11/28/2014 10:39 AM, Eldo Joseph wrote: >>>> Hi All, >>>> Can some one help me, with the best practices which can be used for >>>> IPAV3 backup and recovery, currently it is been a kind of single >>>> point of failure. >>>> Current infrastructure: One Master serverFive clients. >>>> I've tried with db2bak and bak2db features, I was able for a >>>> successful restore. how ever IPA admintools commands are failing with >>>> this error. >>>> (info): TGS_REQ (4 etypes {18 17 16 23}) xx.xx.xx.xx : PROCESS_TGS: >>>> authtime 0, <unknown client> for <unknown server>, Decrypt integrity >>>> check failed >>>> Thanks,Eldo. >>>> >>> Hello Eldo, >>> >>> sounds like: https://fedorahosted.org/freeipa/ticket/4726 >>> >>> try to run: >>> sudo -u apache kdestroy >>> after the restore >> >> You may also want to look at the design for backup and restore, >> http://www.freeipa.org/page/V3/Backup_and_Restore . Quite a lot needs to >> happen for a proper backup and restore, particularly since you have >> multiple masters. >> >> rob
Also, some of our thoughts and strategies on Backup and Restore are in this general article: http://www.freeipa.org/page/Backup_and_Restore HTH, Martin -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project