> 1. The all DS replicas must be running when the package is
installed,
> otherwise the upgrade will fail.
>
Not necessarily. Dogtag schema shows up in 99user.ldif which means they
are replicated. Schema changes are replicated, which means they really
only need to be done on one server. If a replica is down, it will
eventually have the change replicated to it when it replays the
changelog.
Right, I meant to say DS of the server being upgraded must be running
(last minute changes messed it up). If IPA is shutdown, to my
understanding it will shutdown the DS too.
--
Endi S. Dewata