This might be trivial but I want to double check the preferred way of
upgrading my ipa environment, I have 3 servers (Running Rhel 7.1, ipa
4.1), 1 acting as master with a ca (external certificate), the replicas
are also ca's, they're only syncing to and from the master, unaware of
each other. The replicas handle all client requests. The master also run
a one-way winsync agreement with one of our active directory servers.
For some reason I think that I should start by upgrading the replicas
and upgrade the master last, but I don't know why, I might have read it
in somewhere, long ago. Is this the preferred way, does order even
matter? The documentation just says /yum update ipa-server/ which seems
easy enough, but I'd rather double check.
Manage your subscription for the Freeipa-users mailing list:
Go to http://freeipa.org for more info on the project