On Friday, August 17, 2018 1:34:03 PM CDT Rob Crittenden wrote:
Anthony Joseph Messina via FreeIPA-users wrote:
> I have two full (DNS, CA, KRA) FreeIPA instances still running F27 for
> stability based on the recommendations at the time of the F28 release. Is
> *this* FreeIPA release recommended for a full OS dnf upgrade from F27
Yes, we pushed that to stable today. I am not aware of any upgrade
issues. Be sure to verify that your certificates are valid before
starting the upgrade. Better to work that out in F27 than in the middle
of a F28 upgrade.
You can optionally install new F28 machines and create replicas on them
to replace the current F27 machines.
Thank you, Alexander and Rob.
I've used the "create replica" method of upgrading in the past, but have
always run into trouble with the continuous splitting of id ranges and dna
ranges as new users are added.
I might give it another shot though--when adding a new replica in the "managed
toplogy" level and promoting a client to a master, is there a way to
the about to be created replica to a certain master? I've found that it seems
to pick whatever existing master it wants to leading to agreements that don't
match between the domain and the ca.
I only run two masters, so I need to go from
MasterA (F27) <-> MasterB (F27)
MasterAA (F28) <-> MasterBB (F28)
I'll dig into the upgraded topology docs a bit to see if I can find more
clarification on promoting a client to master in a master in a topology-
managed environment, while upgrading the release at the same time.
Anthony - https://messinet.com
F9B6 560E 68EA 037D 8C3D D1C9 FF31 3BDB D9D8 99B6