Hello,

in one of my test environments I upgraded my IPA server from 3.0 on CentOS 6.6 to 3.3 on CentOS 7.0.

This was mainly due to testing IPA integration wit vSPhere (see here for a draft doc on how I managed it

http://www.freeipa.org/page/HowTo/vsphere5_integration

)

The workflow was as detailed in Chapter 6 here, creating a replica and decommissioning the old one:

https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Linux_Domain_Identity_Authentication_and_Policy_Guide/upgrading.html

So I now have a new IPA server for the same domain with another hostname/ip.

In the mean time I reinstall in version 7 the old IPA server, how can inform/update oVirt about the domain changes?

[root@ovirtmgr ~]# engine-manage-domains edit --domain=localdomain.local --provider=ipa --ldap-servers=c7server.localdomain.local

Enter password:

Failure while testing domain localdomain.local. Details: An internal error has ocurred in the Kerberos implementation of the Java virtual machine. This usually means that the LDAP server is configured with a minimum security strength factor (minssf) of 0. Change it to 1 and try again.

ANy file I can eventually manually edit?

Thanks in advance,

Gianluca