[Freeipa-users] FreeIPA Migration to RHEL 9 or Cent OS 9 or Alma Linux 9 or Rocky Linux 9

2022-09-29 Thread TomK via FreeIPA-users
Hey Folks, I'm looking into migrating my FreeIPA 4.6.6 setup to RHEL 9 or any of the subject *nix 9 environments. The immediate steps I can see doing is: 0) Take snapshots 1) Spin up RHEL 9 or Cent OS 9 boxes etc. 2) Install the latest FreeIPA version. 3) Enable replication from the older

[Freeipa-users] Re: Help ipa-server-upgrade command failed, exception: NetworkError: cannot connect to https://hostname.ipa.example.com:8443/ca/rest/account/login [SSL: CERTIFICATE_VERIFY_FAILED] cert

2022-09-29 Thread Rob Crittenden via FreeIPA-users
Polavarapu Manideep Sai wrote: > Hi Rob, > > Certificates are valid in this case > > In Replica Server we have upgraded the packages > Upgraded version VERSION: 4.6.8, API_VERSION: 2.237 > > Master Server Version: VERSION: 4.5.0, API_VERSION: 2.228 > > > Note: Any new changes at Replica

[Freeipa-users] Re: Help ipa-server-upgrade command failed, exception: NetworkError: cannot connect to https://hostname.ipa.example.com:8443/ca/rest/account/login [SSL: CERTIFICATE_VERIFY_FAILED] cert

2022-09-29 Thread Polavarapu Manideep Sai via FreeIPA-users
Hi Rob, Certificates are valid in this case In Replica Server we have upgraded the packages Upgraded version VERSION: 4.6.8, API_VERSION: 2.237 Master Server Version: VERSION: 4.5.0, API_VERSION: 2.228 Note: Any new changes at Replica server not replicating/syncing/populating to master

[Freeipa-users] Re: LDAP not starting for IPA-Server

2022-09-29 Thread Rob Crittenden via FreeIPA-users
Nick Polites via FreeIPA-users wrote: > Is it possible to export the users/passwords/groups and polices from my other > IPA server which is working and import them into here? I guess I could use a > data only backup from there and import it here. > > Are there any additional steps that I need

[Freeipa-users] Re: Help ipa-server-upgrade command failed, exception: NetworkError: cannot connect to https://hostname.ipa.example.com:8443/ca/rest/account/login [SSL: CERTIFICATE_VERIFY_FAILED] cert

2022-09-29 Thread Rob Crittenden via FreeIPA-users
Polavarapu Manideep Sai via FreeIPA-users wrote: > Hi Team, > >   > > Facing below error while upgrading the IPA server using > ipa-server-upgrade command > >   > > Please let us know the fix if any , let us know if any more details > required on the same > >   > > ipa-server-upgrade command

[Freeipa-users] Re: ipa-healthcheck change log location

2022-09-29 Thread Rob Crittenden via FreeIPA-users
Tania Hagan via FreeIPA-users wrote: > I managed this by overriding systemd: > /etc/systemd/system/ipa-healthcheck.service > > [Unit] > Description=Execute IPA Healthcheck > > [Service] > Type=simple > ExecStart=/usr/bin/ipa-healthcheck --output-file /var/log/ipa-healthcheck.log > > [Install]

[Freeipa-users] Re: ipa-healthcheck change log location

2022-09-29 Thread Tania Hagan via FreeIPA-users
I managed this by overriding systemd: /etc/systemd/system/ipa-healthcheck.service [Unit] Description=Execute IPA Healthcheck [Service] Type=simple ExecStart=/usr/bin/ipa-healthcheck --output-file /var/log/ipa-healthcheck.log [Install] WantedBy=multi-user.target

[Freeipa-users] ipa-healthcheck change log location

2022-09-29 Thread Tania Hagan via FreeIPA-users
Hi, Using the ipa-healthcheck it will export logs to /var/log/ipa/healthcheck/healthcheck.log However I'm trying to use the ipahealthcheck_exporter using a created user and group (ipahealthcheck_exporter) which requires permission to read the file /var/log/healthcheck/healthcheck.log.

[Freeipa-users] Help ipa-server-upgrade command failed, exception: NetworkError: cannot connect to https://hostname.ipa.example.com:8443/ca/rest/account/login [SSL: CERTIFICATE_VERIFY_FAILED] certific

2022-09-29 Thread Polavarapu Manideep Sai via FreeIPA-users
Hi Team, Facing below error while upgrading the IPA server using ipa-server-upgrade command Please let us know the fix if any , let us know if any more details required on the same ipa-server-upgrade command failed, exception: NetworkError: cannot connect to

[Freeipa-users] Re: IPA-Domain not shown

2022-09-29 Thread Ronald Wimmer via FreeIPA-users
On 29.09.22 10:24, Alexander Bokovoy via FreeIPA-users wrote: On to, 29 syys 2022, Ronald Wimmer via FreeIPA-users wrote: On 29.09.22 07:43, Sumit Bose via FreeIPA-users wrote: Am Wed, Sep 28, 2022 at 09:29:46PM +0200 schrieb Ronald Wimmer via FreeIPA-users: On 28.09.22 20:18, Rob

[Freeipa-users] Re: IPA-Domain not shown

2022-09-29 Thread Alexander Bokovoy via FreeIPA-users
On to, 29 syys 2022, Ronald Wimmer via FreeIPA-users wrote: On 29.09.22 07:43, Sumit Bose via FreeIPA-users wrote: Am Wed, Sep 28, 2022 at 09:29:46PM +0200 schrieb Ronald Wimmer via FreeIPA-users: On 28.09.22 20:18, Rob Crittenden wrote: Ronald Wimmer via FreeIPA-users wrote: We set up IPA

[Freeipa-users] Re: IPA-Domain not shown

2022-09-29 Thread Ronald Wimmer via FreeIPA-users
On 29.09.22 07:43, Sumit Bose via FreeIPA-users wrote: Am Wed, Sep 28, 2022 at 09:29:46PM +0200 schrieb Ronald Wimmer via FreeIPA-users: On 28.09.22 20:18, Rob Crittenden wrote: Ronald Wimmer via FreeIPA-users wrote: We set up IPA in a new network segment. Everything works fine but when I