Hey all,

About a year ago I did a really, really stupid thing.  I updated IPA on one 
CentOS 7 host, then before being really sure things were working, I did the 
replica.  Turned out the first upgrade only 'mostly' worked[*], meaning both 
hosts are now partially wrecked :S

The good news is, DNS and PKI seems mostly in-tact and functional (why I 
haven't done anything for a year).  The bad news is, the web interface and 
API-access (ipa cmdline) is non-functional.  Meaning I have no way to maintain 
the setup, add new replicas/hosts, etc. :(

Both kerberos and ldapsearch are working, so I'm wondering if there's a way I 
can "save" my DNS and user/group/kerberos records, to make a 
re-build/re-install less painful?  I don't have anything worth saving PKI-wise.

Thoughts?

[*] The damage was caused by running out of disk-space after the package 
install, while the upgrade or schema-update script was running.  I'm not above 
trying to repair the API, but so far my attempts have all been fruitless.  I 
tried 'yum reinstall' and manually running the upgrade scripts.  The damage 
seems to be inside the databases, since restoring from backup also restores 
API-breakage.
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org

Reply via email to