[Freeipa-users] Re: Upgrade outdated FreeIPA sanity check

2023-02-08 Thread Kevin Vasko via FreeIPA-users
Appreciate the response. Unfortunately, I’ve got the hand i’ve been deal with. Our machines normally have 1-2 but if someone hardcodes a single DNS it’s probably going to the main server. The systems using DHCP would be fine…but for the ones that aren’t it will just all break. No matter, to

[Freeipa-users] Re: Upgrade outdated FreeIPA sanity check

2023-02-08 Thread Jernej Jakob via FreeIPA-users
I forgot one more option. Since the first server is older than the other 2, you could not upgrade it but just shut it down. Follow the procedures: promote one of the two newer servers to CA renewal master, follow steps to decomission/remove the server from the domain, remove DNS SRV and A/

[Freeipa-users] Re: Upgrade outdated FreeIPA sanity check

2023-02-08 Thread Jernej Jakob via FreeIPA-users
On Wed, 8 Feb 2023 09:53:35 -0600 Kevin Vasko via FreeIPA-users wrote: > Thanks Rafael. > > I was hoping to do it in place if at all possible because where things get > complicated is the 4.5.4 server is also the internal DNS server that > everyone utilizes (we have multiple but people just use

[Freeipa-users] Re: Upgrade outdated FreeIPA sanity check

2023-02-08 Thread Kevin Vasko via FreeIPA-users
Thanks Rafael. I was hoping to do it in place if at all possible because where things get complicated is the 4.5.4 server is also the internal DNS server that everyone utilizes (we have multiple but people just use the 1 mainly). It really was their "main" server. I added the other two replicas a

[Freeipa-users] Re: Upgrade outdated FreeIPA sanity check

2023-02-08 Thread Rafael Jeffman via FreeIPA-users
On Tue, Feb 7, 2023 at 6:29 PM Kevin Vasko via FreeIPA-users < freeipa-users@lists.fedorahosted.org> wrote: > > We have a set of 3x freeIPA servers that have outdated (everything) in a development/test environment that need to be updated. > > It seems that 4.6.8-5.el7.centos.12 is the latest