[Freeipa-users] Re: Upgrade FreeIPA cluster from v4.6 (el7) to v4.9 (el8)

2021-09-10 Thread Mikhail Kiselev via FreeIPA-users
Thanks. But this version is not yet in the repositories.
___
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[Freeipa-users] Re: Upgrade FreeIPA cluster from v4.6 (el7) to v4.9 (el8)

2021-09-09 Thread Florence Renaud via FreeIPA-users
Hi,

the fix is included in 389-ds-base 1.4.3.23-8.
flo

On Fri, Sep 10, 2021 at 8:46 AM Mikhail Kiselev via FreeIPA-users <
freeipa-users@lists.fedorahosted.org> wrote:

> I'll installed soft:
> [code]
> [root@ipael8 ~]# dnf list 389*
> Last metadata expiration check: 0:16:59 ago on Пт 10 сен 2021 13:26:14.
> Installed Packages
> 389-ds-base.x86_64
> 1.4.3.23-7.module_el8.5.0+889+90e0384f
>  @appstream
> 389-ds-base-libs.x86_64
>1.4.3.23-7.module_el8.5.0+889+90e0384f
>  @appstream
> Available Packages
> 389-ds-base-devel.x86_64
> 1.4.3.23-7.module_el8.5.0+889+90e0384f
>  appstream
> 389-ds-base-legacy-tools.x86_64
>1.4.3.23-7.module_el8.5.0+889+90e0384f
>  appstream
> 389-ds-base-snmp.x86_64
>1.4.3.23-7.module_el8.5.0+889+90e0384f
>  appstream
> [root@ipael8 ~]# dnf list ipa*
> Last metadata expiration check: 0:17:13 ago on Пт 10 сен 2021 13:26:14.
> Installed Packages
> ipa-client.x86_64
>   4.9.6-4.module_el8.5.0+921+2b5d5825
>  @appstream
> ipa-client-common.noarch
>4.9.6-4.module_el8.5.0+921+2b5d5825
>  @appstream
> ipa-common.noarch
>   4.9.6-4.module_el8.5.0+921+2b5d5825
>  @appstream
> ipa-healthcheck-core.noarch
>   0.7-6.module_el8.5.0+921+2b5d5825
>  @appstream
> ipa-selinux.noarch
>4.9.6-4.module_el8.5.0+921+2b5d5825
>  @appstream
> ipa-server.x86_64
>   4.9.6-4.module_el8.5.0+921+2b5d5825
>  @appstream
> ipa-server-common.noarch
>4.9.6-4.module_el8.5.0+921+2b5d5825
>  @appstream
> ipa-server-dns.noarch
>   4.9.6-4.module_el8.5.0+921+2b5d5825
>  @appstream
> ipa-server-trust-ad.x86_64
>4.9.6-4.module_el8.5.0+921+2b5d5825
>  @appstream
> [/code]
> ___
> FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
> To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
> Do not reply to spam on the list, report it:
> https://pagure.io/fedora-infrastructure
>
___
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[Freeipa-users] Re: Upgrade FreeIPA cluster from v4.6 (el7) to v4.9 (el8)

2021-09-09 Thread Mikhail Kiselev via FreeIPA-users
I'll installed soft:
[code]
[root@ipael8 ~]# dnf list 389*
Last metadata expiration check: 0:16:59 ago on Пт 10 сен 2021 13:26:14.
Installed Packages
389-ds-base.x86_64  
  1.4.3.23-7.module_el8.5.0+889+90e0384f
   @appstream
389-ds-base-libs.x86_64 
  1.4.3.23-7.module_el8.5.0+889+90e0384f
   @appstream
Available Packages
389-ds-base-devel.x86_64
  1.4.3.23-7.module_el8.5.0+889+90e0384f
   appstream 
389-ds-base-legacy-tools.x86_64 
  1.4.3.23-7.module_el8.5.0+889+90e0384f
   appstream 
389-ds-base-snmp.x86_64 
  1.4.3.23-7.module_el8.5.0+889+90e0384f
   appstream 
[root@ipael8 ~]# dnf list ipa*
Last metadata expiration check: 0:17:13 ago on Пт 10 сен 2021 13:26:14.
Installed Packages
ipa-client.x86_64   
 4.9.6-4.module_el8.5.0+921+2b5d5825
   @appstream
ipa-client-common.noarch
 4.9.6-4.module_el8.5.0+921+2b5d5825
   @appstream
ipa-common.noarch   
 4.9.6-4.module_el8.5.0+921+2b5d5825
   @appstream
ipa-healthcheck-core.noarch 
 0.7-6.module_el8.5.0+921+2b5d5825  
   @appstream
ipa-selinux.noarch  
 4.9.6-4.module_el8.5.0+921+2b5d5825
   @appstream
ipa-server.x86_64   
 4.9.6-4.module_el8.5.0+921+2b5d5825
   @appstream
ipa-server-common.noarch
 4.9.6-4.module_el8.5.0+921+2b5d5825
   @appstream
ipa-server-dns.noarch   
 4.9.6-4.module_el8.5.0+921+2b5d5825
   @appstream
ipa-server-trust-ad.x86_64  
 4.9.6-4.module_el8.5.0+921+2b5d5825
   @appstream
[/code]
___
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[Freeipa-users] Re: Upgrade FreeIPA cluster from v4.6 (el7) to v4.9 (el8)

2021-09-09 Thread Florence Renaud via FreeIPA-users
Hi,
Which version of 389-ds is installed on the replica? I think you're hitting
https://github.com/389ds/389-ds-base/issues/4872

The problem happens because the new replica has a schema definition for
entryUUID with a new syntax. When it gets installed, the schema should get
replicated to the original master but the master doesn't know this new
syntax, schema replication fails, and the entries with this attribute can't
be replicated to the original master.

flo

On Fri, Sep 10, 2021 at 6:32 AM Mikhail Kiselev via FreeIPA-users <
freeipa-users@lists.fedorahosted.org> wrote:

> Log dirsrv on master https://pastebin.com/hqSrNZQ7
> Log dirsrv on new replica https://pastebin.com/cpzC2pji
> ___
> FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
> To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
> Do not reply to spam on the list, report it:
> https://pagure.io/fedora-infrastructure
>
___
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[Freeipa-users] Re: Upgrade FreeIPA cluster from v4.6 (el7) to v4.9 (el8)

2021-09-09 Thread Mikhail Kiselev via FreeIPA-users
Log dirsrv on master https://pastebin.com/hqSrNZQ7
Log dirsrv on new replica https://pastebin.com/cpzC2pji
___
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[Freeipa-users] Re: Upgrade FreeIPA cluster from v4.6 (el7) to v4.9 (el8)

2021-09-09 Thread Mikhail Kiselev via FreeIPA-users
Log dirsrv on master https://pastebin.com/hqSrNZQ7
Log dirsrv on new replica https://pastebin.com/cpzC2pji
___
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[Freeipa-users] Re: Upgrade FreeIPA cluster from v4.6 (el7) to v4.9 (el8)

2021-09-03 Thread Rob Crittenden via FreeIPA-users
Mikhail Kiselev via FreeIPA-users wrote:
> Hi. I want to upgrade a cluster from 4.6 to 4.9
> To do this, I raised the host with EL8 and launched ipa-client-install
> is this the right way, without data loss and service downtime?

Yes.

I can't explain why replication isn't being marked as complete during
install unless you just have thousands and thousands of entries.
Otherwise its that the remote (el7) side isn't sending the expected
response so that IPA knows that replication is complete and without error.

You'll need to dig into the 389-ds logs on both sides looking for
issues, both in access and in errors. You can use the
ipareplica-install.log to help determine the approximate time to start
looking in the logs to help narrow things down.

rob
___
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure