Chapter 12. Updating and downgrading IdM

Prerequisites

• Ensure you have applied all previously released errata relevant to the RHEL system. For more information, see the How do I apply package updates to my RHEL system? KCS article.

• You are upgrading from a previous IdM for RHEL release. For example, if you are upgrading to IdM for RHEL 9.4, you must be upgrading from IdM for RHEL 9.3. If you are on RHEL 9.2, you must upgrade to 9.3 first by setting the system release version to 9.3:

  # subscription-manager release --set=9.3
  Release set to: 9.3
  
  # dnf clean all
  
  # subscription-manager release --show
  Release: 9.3

  Copy to Clipboard Toggle word wrap
  Important

  Replace 9.3 with the next supported minor release for your system. Skipping a minor version is unsupported. If you are using a RHEL Extended Update Support (EUS) subscription, you can only upgrade to the next EUS release. For example, if you are running IdM on RHEL 9.4 EUS, the next supported version for an upgrade is RHEL 9.6 EUS. To find the next supported version, see the Red Hat Enterprise Linux Life Cycle page.

Procedure

• Select one of the following options:

  • Update the entire system (recommended). If your system has third-party repositories enabled, disable them first to avoid potential conflicts from external packages.

    For instructions on how to identify and disable repositories, see the Enabling or disabling a repository using Red Hat Subscription Management article.

    • After disabling any third-party repositories, update the system:

      # dnf update

      Copy to Clipboard Toggle word wrap

  • Alternatively, you can update only the IdM-related packages.

    Important

    This method only updates IdM packages. As a result, you might miss other important RHEL updates, including security patches and bug fixes.

    • To upgrade all IdM packages to the latest available version:

      # dnf upgrade ipa-* 389-ds-*

      Copy to Clipboard Toggle word wrap

    • To synchronize IdM packages to the latest version available from any enabled repository:

      # dnf distro-sync ipa-* 389-ds-*

      Copy to Clipboard Toggle word wrap

      After you update the IdM packages on at least one server, all other servers in the topology receive the updated schema, even if you do not update their packages. This ensures that any new entries which use the new schema can be replicated among the other servers.