Chris Evich via FreeIPA-users wrote:
Hey all,
About a year ago I did a really, really stupid thing. I updated IPA on one CentOS 7
host, then before being really sure things were working, I did the replica. Turned out
the first upgrade only 'mostly' worked[*], meaning both hosts are now partially
wrecked :S
The good news is, DNS and PKI seems mostly in-tact and functional (why I haven't done
anything for a year). The bad news is, the web interface and API-access (ipa cmdline) is
non-functional. Meaning I have no way to maintain the setup, add new replicas/hosts, etc.
:(
Both kerberos and ldapsearch are working, so I'm wondering if there's a way I can
"save" my DNS and user/group/kerberos records, to make a re-build/re-install
less painful? I don't have anything worth saving PKI-wise.
Thoughts?
[*] The damage was caused by running out of disk-space after the package install, while
the upgrade or schema-update script was running. I'm not above trying to repair the
API, but so far my attempts have all been fruitless. I tried 'yum reinstall' and
manually running the upgrade scripts. The damage seems to be inside the databases, since
restoring from backup also restores API-breakage.
We need more information on why your definition of wrecked is. What
isn't working? What logs can you provide?
rob