freeipa

Clone
Source Code
GIT

#8217 RFE: ipa-backup should compare locally and globally installed server roles
Closed: fixed 5 years ago by fcami. Opened 5 years ago by fcami.

Closed: fixed
Reopen Issue

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 8): Bug 1810154

Description of problem:

ipa-backup should check whether all globally used server roles are locally
installed. If that's not the case, the resulting backup will probably not be
sufficient to restore a functioning, identical cluster.
For instance: taking a backup without a CA or KRA, etc.

Metadata Update from @fcami:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1810154
5 years ago

Metadata Update from @fcami:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/4304
5 years ago

Metadata Update from @fcami:
- Custom field changelog adjusted to ipa-backup now checks whether the local replica's roles match those used in the cluster and exits with a warning if this is not the case as backups taken on this host would not be sufficient for a proper restore. FreeIPA administrators are advised to double check whether the host backups are run has all the necessary (used) roles.
5 years ago

master:

  • 3a9b66b ipatests: test ipa-backup with different role configurations.
  • 9324bba test_backup_and_restore: add server role verification steps
  • 3665ba9 ipa-backup: Make sure all roles are installed on the current master.

ipa-4-8:

  • 00e2a48 ipatests: test ipa-backup with different role configurations.
  • 69a2b6d test_backup_and_restore: add server role verification steps
  • 37a60b2 ipa-backup: Make sure all roles are installed on the current master.

Keeping issue open on purpose.

master:

  • a087fd9 ipatests: move ipa_backup to tasks

ipa-4-8:

  • 8691e5f ipatests: move ipa_backup to tasks

Metadata Update from @fcami:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
5 years ago

Log in to comment on this ticket.

Metadata
None
None
None
None
None
None
None
None
None
None
None
None
None
None
None
https://github.com/freeipa/freeipa/pull/4304
None
None
None
None
None
ipa-backup now checks whether the local replica's roles match those used in the cluster and exits with a warning if this is not the case as backups taken on this host would not be sufficient for a proper restore. FreeIPA administrators are advised to double check whether the host backups are run has all the necessary (used) roles.
None
Powered by Pagure 5.14.1
Documentation • File an Issue • About • SSH Hostkey/Fingerprint
© Red Hat, Inc. and others.