Re: [Freeipa-users] Full migration from 3.X to 4.X
Matt Wells wrote: I've seen many links and conversations about migrating from 3.X to 4.X; some with migrate-ds but nothing that said I did it and it worked. Perhaps my Google-Fu is failing me. So I thought I'd ask here, has anyone fully migrated? Systems, SSL certs, sudo and everything? What resources did you use? I'm moving to all new systems so this isn't an in-place upgrade. Right now I have two systems (at 3.X) and two more (at 4.X) waiting in the wings to take over. I see where I could get users and groups but what about the rest? Thanks to anyone who can point in the right direction. I'll keep poking on Google and if I find anything I'll be sure to respond to my own query. Migration is for moving from an LDAP system to IPA. To move between major versions the recommended path is to create a new master on the upgraded platform. Run them in tandem until you're satisfied that things are working and then retire the older version masters. Be sure to include a CA on one or more of the 4.x masters as well. rob -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project
Re: [Freeipa-users] Full migration from 3.X to 4.X
On Friday, February 06, 2015 05:14:57 PM Rob Crittenden wrote: Matt Wells wrote: I've seen many links and conversations about migrating from 3.X to 4.X; some with migrate-ds but nothing that said I did it and it worked. Perhaps my Google-Fu is failing me. So I thought I'd ask here, has anyone fully migrated? Systems, SSL certs, sudo and everything? What resources did you use? I'm moving to all new systems so this isn't an in-place upgrade. Right now I have two systems (at 3.X) and two more (at 4.X) waiting in the wings to take over. I see where I could get users and groups but what about the rest? Thanks to anyone who can point in the right direction. I'll keep poking on Google and if I find anything I'll be sure to respond to my own query. Migration is for moving from an LDAP system to IPA. To move between major versions the recommended path is to create a new master on the upgraded platform. Run them in tandem until you're satisfied that things are working and then retire the older version masters. Be sure to include a CA on one or more of the 4.x masters as well. Watch for this issue that I ran into: https://fedorahosted.org/pki/ticket/1235 -- Anthony - https://messinet.com/ - https://messinet.com/~amessina/gallery 8F89 5E72 8DF0 BCF0 10BE 9967 92DC 35DC B001 4A4E signature.asc Description: This is a digitally signed message part. -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project
[Freeipa-users] Full migration from 3.X to 4.X
I've seen many links and conversations about migrating from 3.X to 4.X; some with migrate-ds but nothing that said I did it and it worked. Perhaps my Google-Fu is failing me. So I thought I'd ask here, has anyone fully migrated? Systems, SSL certs, sudo and everything? What resources did you use? I'm moving to all new systems so this isn't an in-place upgrade. Right now I have two systems (at 3.X) and two more (at 4.X) waiting in the wings to take over. I see where I could get users and groups but what about the rest? Thanks to anyone who can point in the right direction. I'll keep poking on Google and if I find anything I'll be sure to respond to my own query. -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project
