Re: [Freeipa-users] FreeIPA 4.1 -> 4.2 replica upgrade process
On 30.11.2015 10:12, Andreas Calminder wrote: Hello! This might be trivial but I want to double check the preferred way of upgrading my ipa environment, I have 3 servers (Running Rhel 7.1, ipa 4.1), 1 acting as master with a ca (external certificate), the replicas are also ca's, they're only syncing to and from the master, unaware of each other. The replicas handle all client requests. The master also run a one-way winsync agreement with one of our active directory servers. For some reason I think that I should start by upgrading the replicas and upgrade the master last, but I don't know why, I might have read it in somewhere, long ago. Is this the preferred way, does order even matter? The documentation just says /yum update ipa-server/ which seems easy enough, but I'd rather double check. Best regards, Andreas Hello, replicas and master are equal, so it should not matter which is upgraded as first. Martin -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
Re: [Freeipa-users] FreeIPA 4.1 -> 4.2 replica upgrade process
On 11/30/2015 01:32 PM, Andreas Calminder wrote: > Great, thanks! > I'll just go ahead and yum update then :). I would just recommend to upgrade one-by-one, to avoid replication conflicts if multiple masters add the same entries in the tree in the same time. > On 11/30/2015 11:58 AM, Martin Basti wrote: >> >> >> On 30.11.2015 10:12, Andreas Calminder wrote: >>> Hello! >>> This might be trivial but I want to double check the preferred way of >>> upgrading my ipa environment, I have 3 servers (Running Rhel 7.1, ipa 4.1), >>> 1 acting as master with a ca (external certificate), the replicas are also >>> ca's, they're only syncing to and from the master, unaware of each other. >>> The replicas handle all client requests. The master also run a one-way >>> winsync agreement with one of our active directory servers. >>> >>> For some reason I think that I should start by upgrading the replicas and >>> upgrade the master last, but I don't know why, I might have read it in >>> somewhere, long ago. Is this the preferred way, does order even matter? The >>> documentation just says /yum update ipa-server/ which seems easy enough, but >>> I'd rather double check. >>> >>> Best regards, >>> Andreas >>> >> Hello, >> >> replicas and master are equal, so it should not matter which is upgraded as >> first. >> >> Martin > -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
Re: [Freeipa-users] FreeIPA 4.1 -> 4.2 replica upgrade process
Great, thanks! I'll just go ahead and yum update then :). /andreas On 11/30/2015 11:58 AM, Martin Basti wrote: On 30.11.2015 10:12, Andreas Calminder wrote: Hello! This might be trivial but I want to double check the preferred way of upgrading my ipa environment, I have 3 servers (Running Rhel 7.1, ipa 4.1), 1 acting as master with a ca (external certificate), the replicas are also ca's, they're only syncing to and from the master, unaware of each other. The replicas handle all client requests. The master also run a one-way winsync agreement with one of our active directory servers. For some reason I think that I should start by upgrading the replicas and upgrade the master last, but I don't know why, I might have read it in somewhere, long ago. Is this the preferred way, does order even matter? The documentation just says /yum update ipa-server/ which seems easy enough, but I'd rather double check. Best regards, Andreas Hello, replicas and master are equal, so it should not matter which is upgraded as first. Martin -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
