#3786 idrange-add with dom-sid/dom-name prompts for secondary-rid-base value
Closed: Fixed None Opened 10 years ago by steeve.

[root@sun-v20z-01 ~]# rpm -q freeipa-server
freeipa-server-3.2.99-0.20130711T1505Zgit57fd275.fc19.x86_64

[root@sun-v20z-01 trust-cli]# /usr/bin/ipa idrange-add --dom-sid S-1-5-21-3052441428-1084853364-590233633  --base-id 1549000000 --range-size 10 local_range
First RID of the corresponding RID range: 10000
First RID of the secondary RID range: 
----------------------------
Added ID range "local_range"
----------------------------
  Range name: local_range
  First Posix ID of the range: 1549000000
  Number of IDs in the range: 10
  First RID of the corresponding RID range: 10000
  Domain SID of the trusted domain: S-1-5-21-3052441428-1084853364-590233633
  Range type: Active Directory domain range

[root@sun-v20z-01 ~]# /usr/bin/ipa idrange-add --dom-name defrRCg --base-id 1549000000 --rid-base 10000 --range-size 10 Trust_range
First RID of the secondary RID range: 12000
ipa: ERROR: invalid 'ID Range setup': SID for the specified trusted domain name could not be found. Please specify the SID directly using dom-sid option.

[root@sun-v20z-01 ~]# /usr/bin/ipa idrange-add --dom-name adtest.qe --base-id 1549000000 --rid-base 10000 --range-size 10 Trust_range
First RID of the secondary RID range: 1
ipa: ERROR: invalid 'ID Range setup': Options dom-sid/dom-name and secondary-rid-base cannot be used together

[root@sun-v20z-01 ~]# /usr/bin/ipa idrange-add --dom-name adtest.qe --base-id 1549000000 --rid-base 10000 --range-size 10 Trust_range
First RID of the secondary RID range: 
ipa: ERROR: Constraint violation: New base range overlaps with existing base range.

This will be a quick fix (fewliner).

Metadata Update from @steeve:
- Issue assigned to tbabej
- Issue set to the milestone: FreeIPA 3.3 - 2013/07

7 years ago

Login to comment on this ticket.

Metadata