Hi,

upfront: please don't judge our setup. I know that the concept is an issue :-(

I have two freeipa servers which are running on an old operating system (Fedora26) and I want to migrate it to centos8.
Because there are not enough resources in our mgmt cluster I need to shut one of them down and reinstall with the new OS (while keeping the name), let them sync and so on.

But here is the issue: We have systems that talk only to ipa1 and systems that talk only to ipa2. I would like to add the IP address of ipa2 to ipa1 and then proceed with the migration.
There is no option to make changes to those systems. They will get removed from our infrastructure but this may take another year, and I don't want to wait any longer with the migration.

Is this even possible? I can think of problems with certificates that say "I am ipa1" when a systems asks expects ipa2 to answer.

I would be really nice if someone could help me solve the problem.

--
Die Selbsthilfegruppe "UTF-8-Probleme" trifft sich diesmal abweichend im groüen Saal.