Mikhail Kiselev via FreeIPA-users wrote:
Hi. I want to upgrade a cluster from 4.6 to 4.9
To do this, I raised the host with EL8 and launched ipa-client-install
is this the right way, without data loss and service downtime?
Yes.
I can't explain why replication isn't being marked as complete during
install unless you just have thousands and thousands of entries.
Otherwise its that the remote (el7) side isn't sending the expected
response so that IPA knows that replication is complete and without error.
You'll need to dig into the 389-ds logs on both sides looking for
issues, both in access and in errors. You can use the
ipareplica-install.log to help determine the approximate time to start
looking in the logs to help narrow things down.
rob