At some point, I deployed ipa-server on a CentOS 6 machine. Being asked to better move it into a VM, I used ipa-replica-prepare / ipa-replica-install . This resulted as wanted, and I got a working IPA-server prototype on the VM.
The original server was then disconnected to keep it as a fallback resource, but this eventually meant that actual production data was fed only to the replica server.
Now I have a full 100+ users operation based on the replica alone, not a healthy proposition. There is no disaster recovery here.
The initial server remains disconnected, but clients (e.g. ipa user-status) regard it as still being a master, and I am quite fearful of reconnecting it and have some unexpected outcome (such as my production databases being overwritten by the almost empty ones that are on the original server). Who has the authority do say which records are true?
Actually, to work around this, I want my current replica to become the master, forget about the old master, an eventually produce a new replica that would work as a backup of the current production environment. Creating a replica of the replica fails with "A replica can only be created on an IPA server installed with ipa-server-install (the first server)."
Instructions for promoting a replica into master are hard to find: The only relevant and somewhat old how-to for freeipa (Fedora) points to files that I don't find in my environment.
So my question boils to: How can I promote my replica to master? Can this be done live ? (Or with minimum downtime & risk ?)