If you do some searches, you can find some perl scripts that will do things like compare two LDIF files to see what changed.

On Jun 25, 2018, at 2:19:16 PM, Alfredo De Luca via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote:

ok thanks. but can I have a different IP address but same hostname? this is to check if everything works

/Alfredo

On Mon, 25 Jun 2018, 18:24 , <hedrick@rutgers.edu> wrote:
Yes. Edit /etc/hosts and add your IP address and hostname. Edit /etc/hostname to put your hostname.

That works for me.

You should probably make sure that you have iptables on the production systems to reject connections from the ip address of your copy. Otherwise you run the danger of having an out of date copy giving you out of date data.

On Jun 25, 2018, at 11:31 AM, Alfredo De Luca <alfredo.deluca@gmail.com> wrote:

​Hi Hedrick. 
Jus a quick one. If i want to restore a full backup IPA in a different host (just for test purpose) can I change the IP address but have the same hostname/FQDN? 

Alfredo

On Sat, Jun 23, 2018 at 5:54 PM <hedrick@rutgers.edu> wrote:
There is actually documentation supporting my view: https://www.freeipa.org/page/Backup_and_Restore Look particularly at the section "Why snapshot and not backup and restore scripts?"

The difference is that they suggest stopping a replica before making a snapshot, while we snapshot a running system. I’ve done this with a variety of databases and other applications. My claim is that a point in time snapshot should be safe for any software that is designed to survive a crash, because a point in time snapshot is no harder to recover from than a crash. We have multiple snapshots, in case we can’t use one of them. But I’ve never seen that happen. 

We always run complex software systems such a ipa in a VM.

On Jun 23, 2018, at 11:28:37 AM, Alfredo De Luca <alfredo.deluca@gmail.com> wrote:

Thanks Charles. Out IPA is a VM too on Openstack but for some reasons they said it's not good to take snapshots and rely on that for backups... I ll investigate further tho... cause my idea was exactly that. Snapshots!!!!


Thanks for sharing.

On Fri, Jun 22, 2018 at 4:34 PM Charles Hedrick <hedrick@cs.rutgers.edu> wrote:
Our IPA servers are VMs. We do backups of snapshots, either through VMware or when the image is on a Netapp, through a Netapp snapshot. That guarantees that you have all the pieces in a consistent state. I’ve never had to restore a production server, but I have started copies of one of the backups to do experiments that I didn’t want to do on a production system. I’ve never had an issue starting from a backup, though I need to do some changes so the system thinks it has the same hostname as the original one.

On Jun 11, 2018, at 9:10 AM, Alfredo De Luca via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote:

Hi all. 
What's the best procedure/practice  to periodically perform a backup on a single freeipa server with CA? 

Cheers

--
Alfredo

_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/freeipa-users@lists.fedorahosted.org/message/KKKIFFZZQS4V562HUWYYR6FHGEA4KOYL/



--
Alfredo




--
Alfredo


_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/freeipa-users@lists.fedorahosted.org/message/TW5LN5LFE5ZFNP2JP6WTV6CKBERMKGSE/