Think i found a way to change it. For documentation purpose if someone else has 
this problem:

In /etc/ipa/default.conf i found our ldap_uri

Then issued this commands:
#verify correct dn
ldapsearch -b 'cn=DOMAIN.LOCAL_new_range,cn=ranges,cn=etc,dc=domain,dc=local'
 
ldapmodify -H ldapi://%2Frun%2Fslapd-DOMAIN-LOCAL.socket
dn: cn=DOMAIN.LOCAL_new_range,cn=ranges,cn=etc,dc=domain,dc=local
changetype: modify
add: ipabaserid
ipabaserid:500000

commit with enter on an empty line.
Did the same for
add: ipasecondarybaserid
ipasecondarybaserid:503000


Now "ipa config-mod --enable-sid --add-sids" did run successful. Let's hope the 
auth problems are fixed too =)
Thanks for your time and help!
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to