freeipa

#8217 RFE: ipa-backup should compare locally and globally installed server roles
Closed: fixed by fcami. Opened by fcami.

Closed: fixed
Reopen Issue

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 8): Bug 1810154

Description of problem:
ipa-backup should check whether all globally used server roles are locally
installed. If that's not the case, the resulting backup will probably not be
sufficient to restore a functioning, identical cluster.
For instance: taking a backup without a CA or KRA, etc.

Metadata Update from @fcami:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1810154

Metadata Update from @fcami:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/4304

Metadata Update from @fcami:
- Custom field changelog adjusted to ipa-backup now checks whether the local replica's roles match those used in the cluster and exits with a warning if this is not the case as backups taken on this host would not be sufficient for a proper restore. FreeIPA administrators are advised to double check whether the host backups are run has all the necessary (used) roles.

master:

  • 3a9b66b5302903f4abe75c3ee93b457f5c1dc405 ipatests: test ipa-backup with different role configurations.
  • 9324bba6b7db4152ff85017d59000fc204ce2c90 test_backup_and_restore: add server role verification steps
  • 3665ba928b25c017465588bd505e93d15d72290f ipa-backup: Make sure all roles are installed on the current master.

ipa-4-8:

  • 00e2a488726a353b7183d5d3b4c2084b9bf5dbc2 ipatests: test ipa-backup with different role configurations.
  • 69a2b6d71478094356ed78295b4c7177e200825c test_backup_and_restore: add server role verification steps
  • 37a60b25a342d723bfe4b4b91373ad5003bd4d29 ipa-backup: Make sure all roles are installed on the current master.

Keeping issue open on purpose.

master:

  • a087fd9255ed5d16b6a84a7b84f0507dad5b200e ipatests: move ipa_backup to tasks

ipa-4-8:

  • 8691e5f8d33e7f023b1535d15637dedaee5bddec ipatests: move ipa_backup to tasks

Metadata Update from @fcami:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
None
https://github.com/freeipa/freeipa/pull/4304
ipa-backup now checks whether the local replica's roles match those used in the cluster and exits with a warning if this is not the case as backups taken on this host would not be sufficient for a proper restore. FreeIPA administrators are advised to double check whether the host backups are run has all the necessary (used) roles.
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.