Hello Flo,
I've decided to follow your advise.
This means I will install another CA instance on the replica server.
However I would prefer to upgrade FreeIPA to version 4.7.2 before.
Unfortunately I failed on this task.
I've executed ipa-server-upgrade and this process finished successfully after a few
minutes:
The IPA services were upgraded
The ipa-server-upgrade command was successful
Checking the installed packages revealed: no updated packages
[root@ipa-replica ~]# rpm -q freeipa-server freeipa-client ipa-server ipa-client
389-ds-base pki-ca krb5-server
freeipa-server-4.7.0-3.fc29.x86_64
freeipa-client-4.7.0-3.fc29.x86_64
Das Paket ipa-server ist nicht installiert
Das Paket ipa-client ist nicht installiert
389-ds-base-1.4.0.16-1.fc29.x86_64
pki-ca-10.6.6-2.fc29.noarch
krb5-server-1.16.1-21.fc29.x86_64
Then I tried command dnf update freeipa-server w/o success: nothing to do
What am I doing wrong here?