If you do some searches, you can find some perl scripts that will do things 
like compare two LDIF files to see what changed.

> On Jun 25, 2018, at 2:19:16 PM, Alfredo De Luca via FreeIPA-users 
> <freeipa-users@lists.fedorahosted.org> wrote:
> 
> ok thanks. but can I have a different IP address but same hostname? this is 
> to check if everything works
> 
> /Alfredo
> 
> On Mon, 25 Jun 2018, 18:24 , <hedr...@rutgers.edu 
> <mailto:hedr...@rutgers.edu>> wrote:
> Yes. Edit /etc/hosts and add your IP address and hostname. Edit /etc/hostname 
> to put your hostname.
> 
> That works for me.
> 
> You should probably make sure that you have iptables on the production 
> systems to reject connections from the ip address of your copy. Otherwise you 
> run the danger of having an out of date copy giving you out of date data.
> 
>> On Jun 25, 2018, at 11:31 AM, Alfredo De Luca <alfredo.del...@gmail.com 
>> <mailto:alfredo.del...@gmail.com>> wrote:
>> 
>> ​Hi Hedrick. 
>> Jus a quick one. If i want to restore a full backup IPA in a different host 
>> (just for test purpose) can I change the IP address but have the same 
>> hostname/FQDN? 
>> 
>> Alfredo
>> ​
>> 
>> On Sat, Jun 23, 2018 at 5:54 PM <hedr...@rutgers.edu 
>> <mailto:hedr...@rutgers.edu>> wrote:
>> There is actually documentation supporting my view: 
>> https://www.freeipa.org/page/Backup_and_Restore 
>> <https://www.freeipa.org/page/Backup_and_Restore> Look particularly at the 
>> section "Why snapshot and not backup and restore scripts?"
>> 
>> The difference is that they suggest stopping a replica before making a 
>> snapshot, while we snapshot a running system. I’ve done this with a variety 
>> of databases and other applications. My claim is that a point in time 
>> snapshot should be safe for any software that is designed to survive a 
>> crash, because a point in time snapshot is no harder to recover from than a 
>> crash. We have multiple snapshots, in case we can’t use one of them. But 
>> I’ve never seen that happen. 
>> 
>> We always run complex software systems such a ipa in a VM.
>> 
>>> On Jun 23, 2018, at 11:28:37 AM, Alfredo De Luca <alfredo.del...@gmail.com 
>>> <mailto:alfredo.del...@gmail.com>> wrote:
>>> 
>>> Thanks Charles. Out IPA is a VM too on Openstack but for some reasons they 
>>> said it's not good to take snapshots and rely on that for backups... I ll 
>>> investigate further tho... cause my idea was exactly that. Snapshots!!!!
>>> 
>>> 
>>> Thanks for sharing.
>>> 
>>> On Fri, Jun 22, 2018 at 4:34 PM Charles Hedrick <hedr...@cs.rutgers.edu 
>>> <mailto:hedr...@cs.rutgers.edu>> wrote:
>>> Our IPA servers are VMs. We do backups of snapshots, either through VMware 
>>> or when the image is on a Netapp, through a Netapp snapshot. That 
>>> guarantees that you have all the pieces in a consistent state. I’ve never 
>>> had to restore a production server, but I have started copies of one of the 
>>> backups to do experiments that I didn’t want to do on a production system. 
>>> I’ve never had an issue starting from a backup, though I need to do some 
>>> changes so the system thinks it has the same hostname as the original one.
>>> 
>>>> On Jun 11, 2018, at 9:10 AM, Alfredo De Luca via FreeIPA-users 
>>>> <freeipa-users@lists.fedorahosted.org 
>>>> <mailto:freeipa-users@lists.fedorahosted.org>> wrote:
>>>> 
>>>> Hi all. 
>>>> What's the best procedure/practice  to periodically perform a backup on a 
>>>> single freeipa server with CA? 
>>>> 
>>>> Cheers
>>>> 
>>>> -- 
>>>> Alfredo
>>>> 
>>>> _______________________________________________
>>>> FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org 
>>>> <mailto:freeipa-users@lists.fedorahosted.org>
>>>> To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org 
>>>> <mailto:freeipa-users-le...@lists.fedorahosted.org>
>>>> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html 
>>>> <https://getfedora.org/code-of-conduct.html>
>>>> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines 
>>>> <https://fedoraproject.org/wiki/Mailing_list_guidelines>
>>>> List Archives: 
>>>> https://lists.fedoraproject.org/archives/list/freeipa-users@lists.fedorahosted.org/message/KKKIFFZZQS4V562HUWYYR6FHGEA4KOYL/
>>>>  
>>>> <https://lists.fedoraproject.org/archives/list/freeipa-users@lists.fedorahosted.org/message/KKKIFFZZQS4V562HUWYYR6FHGEA4KOYL/>
>>> 
>>> 
>>> 
>>> -- 
>>> Alfredo
>>> 
>> 
>> 
>> 
>> -- 
>> Alfredo
>> 
> 
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
> To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: 
> https://lists.fedoraproject.org/archives/list/freeipa-users@lists.fedorahosted.org/message/TW5LN5LFE5ZFNP2JP6WTV6CKBERMKGSE/

_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/freeipa-users@lists.fedorahosted.org/message/2PT5M7XGYOVDFO3L6TXS5QZU34APXPUY/

Reply via email to