Dmitry Krasov via FreeIPA-users wrote: > How can I migrate ipa Data base to other new one server? >
I guess you're giving up trying to get your certificates renewed? I'm not sure you ever told us the distribution you run the IPA server on. IPA 4.12.0 introduced a migration tool to migrate all of the data from one server to another. The catch is that this new server must be a fresh install so it has a new CA. You can retain the same domain and realm. No secrets are migrated so all users will need to migrate their password (see the docs), re-enroll all clients, re-distribute the new CA certificate and if any other services or hosts were given certificates then they will need to be re-issued from the new CA. rob -- _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue