Re: [Freeipa-users] export entire ldap/kerberos/etc onto a new host

2011-02-01 Thread Peter Doherty
On Feb 1, 2011, at 15:04 , Dmitri Pal wrote: > > Also it is worth mentioning that we are planning to come up with Beta 2 > later this week so may be it makes sense to wait couple days and move to > the latest bits. Can I upgrade from Beta-1 to Beta-2, or are they incompatible? Peter __

Re: [Freeipa-users] export entire ldap/kerberos/etc onto a new host

2011-02-01 Thread Dmitri Pal
On 02/01/2011 03:00 PM, Dmitri Pal wrote: > On 02/01/2011 02:51 PM, Peter Doherty wrote: >> On Feb 1, 2011, at 14:43 , Dmitri Pal wrote: >> >>> On 02/01/2011 02:30 PM, Peter Doherty wrote: I hope someone can help with this. I've got a freeipa server running the 1.9 alpha release. It'

Re: [Freeipa-users] export entire ldap/kerberos/etc onto a new host

2011-02-01 Thread Rich Megginson
On 02/01/2011 12:51 PM, Peter Doherty wrote: On Feb 1, 2011, at 14:43 , Dmitri Pal wrote: On 02/01/2011 02:30 PM, Peter Doherty wrote: I hope someone can help with this. I've got a freeipa server running the 1.9 alpha release. It's broken, (the x509 cert expired and can't be renewed) and I wa

Re: [Freeipa-users] export entire ldap/kerberos/etc onto a new host

2011-02-01 Thread Dmitri Pal
On 02/01/2011 03:00 PM, Rich Megginson wrote: > On 02/01/2011 12:51 PM, Peter Doherty wrote: >> >> On Feb 1, 2011, at 14:43 , Dmitri Pal wrote: >> >>> On 02/01/2011 02:30 PM, Peter Doherty wrote: I hope someone can help with this. I've got a freeipa server running the 1.9 alpha release. >

Re: [Freeipa-users] IPA server certificate update and "Directory Manager" password

2011-02-01 Thread Simo Sorce
On Tue, 1 Feb 2011 12:38:50 -0500 Peter Doherty wrote: > If I want to start from scratch with the new Beta release, how would > I dump the entire LDAP/KRB database so that I could import it into a > new server? > The Docs mention doing regular backups, but they don't even tell how > to backup t

Re: [Freeipa-users] export entire ldap/kerberos/etc onto a new host

2011-02-01 Thread Peter Doherty
On Feb 1, 2011, at 14:43 , Dmitri Pal wrote: On 02/01/2011 02:30 PM, Peter Doherty wrote: I hope someone can help with this. I've got a freeipa server running the 1.9 alpha release. It's broken, (the x509 cert expired and can't be renewed) and I want to just abandon it. I set up a new host an

Re: [Freeipa-users] export entire ldap/kerberos/etc onto a new host

2011-02-01 Thread Dmitri Pal
On 02/01/2011 02:51 PM, Peter Doherty wrote: > > On Feb 1, 2011, at 14:43 , Dmitri Pal wrote: > >> On 02/01/2011 02:30 PM, Peter Doherty wrote: >>> I hope someone can help with this. >>> I've got a freeipa server running the 1.9 alpha release. >>> It's broken, (the x509 cert expired and can't be re

Re: [Freeipa-users] export entire ldap/kerberos/etc onto a new host

2011-02-01 Thread Peter Doherty
On Feb 1, 2011, at 14:43 , Dmitri Pal wrote: On 02/01/2011 02:30 PM, Peter Doherty wrote: I hope someone can help with this. I've got a freeipa server running the 1.9 alpha release. It's broken, (the x509 cert expired and can't be renewed) and I want to just abandon it. I set up a new host an

Re: [Freeipa-users] export entire ldap/kerberos/etc onto a new host

2011-02-01 Thread Dmitri Pal
On 02/01/2011 02:30 PM, Peter Doherty wrote: > I hope someone can help with this. > I've got a freeipa server running the 1.9 alpha release. > It's broken, (the x509 cert expired and can't be renewed) and I want > to just abandon it. > > I set up a new host and installed the 2.0 beta release (from

[Freeipa-users] export entire ldap/kerberos/etc onto a new host

2011-02-01 Thread Peter Doherty
I hope someone can help with this. I've got a freeipa server running the 1.9 alpha release. It's broken, (the x509 cert expired and can't be renewed) and I want to just abandon it. I set up a new host and installed the 2.0 beta release (from the git archives, because the regular archive incl

Re: [Freeipa-users] IPA server certificate update and "Directory Manager" password

2011-02-01 Thread Peter Doherty
On Jan 20, 2011, at 17:32 , Rob Crittenden wrote: Yes, that was going to be my next question. While throwing any old self-signed cert in there might get the server up other things won't work, notably replication. Ok, here are some steps I worked out that I think will get you back in bus