Attempting to migrate my IPA infrastructure from Fedora 19 to CentOS or RHEL 7 fails. Fedora 19 currently has freeipa version 3.3.5, whereas CentOS 7 and RHEL 7.1beta both have ipa version 3.3.3.
Although it is my understanding that the RHEL versions should be compatible with the Fedora 19 version despite the numbering discrepancy, ipa-replica-install rejects the replica files created on the existing Fedora masters.
So the problem is that you are trying to create an older version replica from a newer version, right?
This is not supported way, although it is true that in this case, the installation should work fine, given that the versions only differ in bug fixes.
To workaround, you could go to your Fedora 19 instance, open /usr/lib/python2.7/site-packages/ipapython/version.py and temporarily edit the NUM_VERSION and generate the replication package (ipa-replica-prepare) again. This will let you bypass the check.
/usr/lib/python2.7/site-packages/ipapython/version.py
ipa-replica-prepare
BTW, RHEL-7.1 Beta should contain FreeIPA 4.1.0 based build, not 3.3.3 one. You may have a wrong repo.
Yes, essentially. The only reason it is worth reporting is that the use case of migrating from old Fedora to current RHEL seems worth supporting, and I have it on good authority that in practice there is no incompatibility between 3.3.3 and 3.3.5. I reported the bug because one of the dev team told me in IRC it would be useful for tracking the use case. I think that might be related to http://www.freeipa.org/page/V4/Domain_Levels
You are also correct that 7.1b should have 4.1.0. It turns out that when installing from the 7.1b install media, subscription-manager none the less does not enable beta repositories by default, and I assumed it would. With the beta repos enabled, I was able to install and migrate to 4.1.0 relatively smoothly. If this were a support case, it would clearly be time to close it. As a bug, it has whatever utility it originally did.
should be folded into domain level ticket when it's created
Should we start allowing lower version of replica being installed, when Domain Level matches?
Not a blocker for 4.3.
Metadata Update from @acd: - Issue assigned to someone - Issue set to the milestone: FreeIPA 4.5 backlog
Thank you taking time to submit this request for FreeIPA. Unfortunately this bug was not given priority and the team lacks the capacity to work on it at this time.
Given that we are unable to fulfil this request I am closing the issue as wontfix. To request re-consideration of this decision please reopen this issue and provide additional technical details about its importance to you.
Metadata Update from @rcritten: - Issue close_status updated to: wontfix - Issue status updated to: Closed (was: Open)
Login to comment on this ticket.