Hi Everyone,
I'm in the process of testing a CentOS 6 to CentOS 7 migration of our IPA
servers (ipa-server-3.0.0 to ipa-server-4.6.5). I have successfully added a
4.6.5 IPA server to my 3.0.0 replicas in my testing environment, and
replication is working fine. I have a few aci differences that I'm still
weeding out, but no show stoppers.
When we initially installed freeipa, we were planning on using the CA
capabilities, but have never actually used it after the initial install. My
question is, if we have never used it, can I simply just not worry about
creating a CA replica, and then renew my certificates using an external CA
after the migration is complete?
Thanks in advance
Terry
--
Terry Soucy
Systems Engineering Lead | Salesforce
Mobile: +1.506.609.3247
<
http://smart.salesforce.com/sig/tsoucy//ca_mb/default/link.html>