Yes, that is possible.
The best and most-supported way is installing a second server (or VM) and running your
desired version on that. Then join it to the domain, install all services (ca, domain,
trust controller, kra etc.).
Then you can uninstall the ‘old’ server (after testing of course!). Make sure you know you
have a copy of the root CA key, admin user creds, directory manager creds etc.
To be sure everything is working, you can also simply shutdown the old server, and then
try to enroll a second ‘new’ server, if that one successfully joins, start the old server
back up and do a normal uninstall so it deletes all replications and references so you
don’t end up with a ghost server.
On 26 May 2019, at 17:14, Fritjof Konkas via FreeIPA-users
I have a old version of freeipa server version 4.1.4 running on fedora 22.
Is it possible to migrate the data from ditto to version 4.6.4 on another server running
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines