[Freeipa-users] Re: Upgrade FreeIPA cluster from v4.6 (el7) to v4.9 (el8)
Thanks. But this version is not yet in the repositories. ___ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[Freeipa-users] Re: Upgrade FreeIPA cluster from v4.6 (el7) to v4.9 (el8)
Hi, the fix is included in 389-ds-base 1.4.3.23-8. flo On Fri, Sep 10, 2021 at 8:46 AM Mikhail Kiselev via FreeIPA-users < freeipa-users@lists.fedorahosted.org> wrote: > I'll installed soft: > [code] > [root@ipael8 ~]# dnf list 389* > Last metadata expiration check: 0:16:59 ago on Пт 10 сен 2021 13:26:14. > Installed Packages > 389-ds-base.x86_64 > 1.4.3.23-7.module_el8.5.0+889+90e0384f > @appstream > 389-ds-base-libs.x86_64 >1.4.3.23-7.module_el8.5.0+889+90e0384f > @appstream > Available Packages > 389-ds-base-devel.x86_64 > 1.4.3.23-7.module_el8.5.0+889+90e0384f > appstream > 389-ds-base-legacy-tools.x86_64 >1.4.3.23-7.module_el8.5.0+889+90e0384f > appstream > 389-ds-base-snmp.x86_64 >1.4.3.23-7.module_el8.5.0+889+90e0384f > appstream > [root@ipael8 ~]# dnf list ipa* > Last metadata expiration check: 0:17:13 ago on Пт 10 сен 2021 13:26:14. > Installed Packages > ipa-client.x86_64 > 4.9.6-4.module_el8.5.0+921+2b5d5825 > @appstream > ipa-client-common.noarch >4.9.6-4.module_el8.5.0+921+2b5d5825 > @appstream > ipa-common.noarch > 4.9.6-4.module_el8.5.0+921+2b5d5825 > @appstream > ipa-healthcheck-core.noarch > 0.7-6.module_el8.5.0+921+2b5d5825 > @appstream > ipa-selinux.noarch >4.9.6-4.module_el8.5.0+921+2b5d5825 > @appstream > ipa-server.x86_64 > 4.9.6-4.module_el8.5.0+921+2b5d5825 > @appstream > ipa-server-common.noarch >4.9.6-4.module_el8.5.0+921+2b5d5825 > @appstream > ipa-server-dns.noarch > 4.9.6-4.module_el8.5.0+921+2b5d5825 > @appstream > ipa-server-trust-ad.x86_64 >4.9.6-4.module_el8.5.0+921+2b5d5825 > @appstream > [/code] > ___ > FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org > To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org > Do not reply to spam on the list, report it: > https://pagure.io/fedora-infrastructure > ___ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[Freeipa-users] Re: Upgrade FreeIPA cluster from v4.6 (el7) to v4.9 (el8)
I'll installed soft: [code] [root@ipael8 ~]# dnf list 389* Last metadata expiration check: 0:16:59 ago on Пт 10 сен 2021 13:26:14. Installed Packages 389-ds-base.x86_64 1.4.3.23-7.module_el8.5.0+889+90e0384f @appstream 389-ds-base-libs.x86_64 1.4.3.23-7.module_el8.5.0+889+90e0384f @appstream Available Packages 389-ds-base-devel.x86_64 1.4.3.23-7.module_el8.5.0+889+90e0384f appstream 389-ds-base-legacy-tools.x86_64 1.4.3.23-7.module_el8.5.0+889+90e0384f appstream 389-ds-base-snmp.x86_64 1.4.3.23-7.module_el8.5.0+889+90e0384f appstream [root@ipael8 ~]# dnf list ipa* Last metadata expiration check: 0:17:13 ago on Пт 10 сен 2021 13:26:14. Installed Packages ipa-client.x86_64 4.9.6-4.module_el8.5.0+921+2b5d5825 @appstream ipa-client-common.noarch 4.9.6-4.module_el8.5.0+921+2b5d5825 @appstream ipa-common.noarch 4.9.6-4.module_el8.5.0+921+2b5d5825 @appstream ipa-healthcheck-core.noarch 0.7-6.module_el8.5.0+921+2b5d5825 @appstream ipa-selinux.noarch 4.9.6-4.module_el8.5.0+921+2b5d5825 @appstream ipa-server.x86_64 4.9.6-4.module_el8.5.0+921+2b5d5825 @appstream ipa-server-common.noarch 4.9.6-4.module_el8.5.0+921+2b5d5825 @appstream ipa-server-dns.noarch 4.9.6-4.module_el8.5.0+921+2b5d5825 @appstream ipa-server-trust-ad.x86_64 4.9.6-4.module_el8.5.0+921+2b5d5825 @appstream [/code] ___ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[Freeipa-users] Re: Upgrade FreeIPA cluster from v4.6 (el7) to v4.9 (el8)
Hi, Which version of 389-ds is installed on the replica? I think you're hitting https://github.com/389ds/389-ds-base/issues/4872 The problem happens because the new replica has a schema definition for entryUUID with a new syntax. When it gets installed, the schema should get replicated to the original master but the master doesn't know this new syntax, schema replication fails, and the entries with this attribute can't be replicated to the original master. flo On Fri, Sep 10, 2021 at 6:32 AM Mikhail Kiselev via FreeIPA-users < freeipa-users@lists.fedorahosted.org> wrote: > Log dirsrv on master https://pastebin.com/hqSrNZQ7 > Log dirsrv on new replica https://pastebin.com/cpzC2pji > ___ > FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org > To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org > Do not reply to spam on the list, report it: > https://pagure.io/fedora-infrastructure > ___ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[Freeipa-users] Re: Upgrade FreeIPA cluster from v4.6 (el7) to v4.9 (el8)
Log dirsrv on master https://pastebin.com/hqSrNZQ7 Log dirsrv on new replica https://pastebin.com/cpzC2pji ___ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[Freeipa-users] Re: Upgrade FreeIPA cluster from v4.6 (el7) to v4.9 (el8)
Log dirsrv on master https://pastebin.com/hqSrNZQ7 Log dirsrv on new replica https://pastebin.com/cpzC2pji ___ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[Freeipa-users] Re: Upgrade FreeIPA cluster from v4.6 (el7) to v4.9 (el8)
Mikhail Kiselev via FreeIPA-users wrote: > Hi. I want to upgrade a cluster from 4.6 to 4.9 > To do this, I raised the host with EL8 and launched ipa-client-install > is this the right way, without data loss and service downtime? Yes. I can't explain why replication isn't being marked as complete during install unless you just have thousands and thousands of entries. Otherwise its that the remote (el7) side isn't sending the expected response so that IPA knows that replication is complete and without error. You'll need to dig into the 389-ds logs on both sides looking for issues, both in access and in errors. You can use the ipareplica-install.log to help determine the approximate time to start looking in the logs to help narrow things down. rob ___ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure