Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.
RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 1287930

Summary: RFE : Migration procedure required : migrating data from RHEL 6 self-signed IPA server to RHEL 7 CA IPA set-up
Product: Red Hat Enterprise Linux 7 Reporter: fjayalat
Component: doc-Linux_Domain_Identity_Management_GuideAssignee: Aneta Šteflová Petrová <apetrova>
Status: CLOSED CURRENTRELEASE QA Contact: Namita Soman <nsoman>
Severity: high Docs Contact:
Priority: unspecified    
Version: 7.1CC: aali, fjayalat, jcholast, jnansi, pvoborni, rcritten, rhel-docs, tscherf
Target Milestone: rcKeywords: Documentation, FutureFeature
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Enhancement
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-11-04 08:39:11 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1301687    
Bug Blocks:    
Attachments:
Description Flags
ipaserver-ca-install.log related to comment #14 none

Description fjayalat 2015-12-03 03:16:31 UTC
1. Proposed title of this feature request  
      
      Migration steps : migrating data from RHEL 6 self-signed IPA server to    RHEL 7 CA IPA set-up

    2. Who is the customer behind the request?  
    Account Name: University of Wellington and 
    Account Number :502631 
      
    TAM customer: no  
    SRM customer: yes  
    Strategic: yes  
      
    3. What is the nature and description of the request?  

->Currently cu is using a RHEL 6 IPA setup with "self-signed certificates". 

->But now customer wants to use some new features that are available in RHEL 7 
( 2FA etc..)  

->Currently we are having issue with the migration as we are trying to migrate from self-signed IPA to IPA with Dogtag CA.

-> We worked with Engineering on this issue via the Bugzilla :
https://bugzilla.redhat.com/show_bug.cgi?id=1256038

-> But now customer is happy to migrate data from their RHEL 6 set-up to a fresh RHEL 7 server.

-> Unfortunately we do not have any technical resources available on this migration.

-> Customer requesting for instructions from Engineering for this migration.



      
    4. Why does the customer need this? (List the business requirements here)  
   
Customer wants to use some new features that are available in RHEL 7 
( 2FA etc..).So the migration from RHEL 6 to RHEL 7 is critical for them.


   5. How would the customer like to achieve this? (List the functional requirements here)  

Customer requesting for steps that he need to follow to successfully migrate data from self-signed rhel 6 to RHEL 7. Customer will try these steps in his test environment and verify before going ahead with his production.


      
    6. For each functional requirement listed, specify how Red Hat and the customer can test to confirm the requirement is successfully implemented. 

Customer agreed to test the procedure in his test environment.
  
      

    7. Is there already an existing RFE upstream or in Red Hat Bugzilla? 
No 
      
    8. Does the customer have any specific timeline dependencies and which release would they like to target (i.e. RHEL5, RHEL6)?  

As Soon as possible.
      
    9. Is the sales team involved in this request and do they have any additional input?  

SRM and Sales teams are already involved with this request.
SRM will add some notes bit later on to highlight the importance of this RFE.
      
    10. List any affected packages or components. 

IPA 
      
    11. Would the customer be able to assist in testing this functionality if implemented?  

YES

Comment 1 Azam Ali 2015-12-07 03:03:08 UTC
Migration from RHEL 6 to RHEL 7 is critical for this customer and they have been trying to do this without any luck for sometime now and have reached to sales requesting escalation.Needs steps  to follow to successfully migrate data from self-signed rhel 6 to RHEL 7 and would appreciate any quick resolution to their issue.

Comment 3 Jan Cholasta 2015-12-15 06:14:05 UTC
This is the correct procedure:

1. create RHEL7 replica of the RHEL6 server
2. remove the RHEL6 server
3. run ipa-ca-install on the RHEL7 replica

The procedure in bug 1256038 (manually install CA on the RHEL6 server and then create a RHEL7 replica of it) is problematic and should not be followed.

Comment 24 fjayalat 2016-01-21 06:52:20 UTC
Created attachment 1116809 [details]
ipaserver-ca-install.log related to comment #14

ipaserver-ca-install.log related to comment #14

Comment 34 Petr Vobornik 2016-01-29 13:07:30 UTC
Migration procedure is in comment 3. When bug 1301687 is fix, I propose to move this bug to documentation component for further evaluation.

Comment 35 Petr Vobornik 2016-07-13 14:38:01 UTC
Moving per comment 34

Comment 45 Aneta Šteflová Petrová 2016-10-05 09:55:36 UTC
The document is now available at https://access.redhat.com/articles/2572361

Note that one of the links in the article leads to the 7-Beta docs. We will update the link to refer to 7 docs later.

Comment 48 Aneta Šteflová Petrová 2016-11-04 08:39:11 UTC
The updated content is now available on the Customer Portal.