Hi, On Fri, Aug 16, 2024 at 9:39 AM jan wagner via FreeIPA-users < [email protected]> wrote:
> Hey! > > Have similar issue. > Can you give more details? Similar how? What is not working? > Is it ok, to change the RIDs for DOMAIN_id_range_legacy? Even if they > previously started (I assume) with > > First RID of the corresponding RID range: 1000 > > First RID of the secondary RID range: 100000000 > If your user entries already contain a ipaNtSecurityIdentifier but you change the Base RID and Secondary Base RID, the mapping algorithm will not evaluate ipaNtSecurityIdentifier the same way for a given posix ID and vice-versa and the user entry content will be inconsistent. Why do you plan to modify the RIDs? which is the default (I assume)? Does this affect some later process, or is > it exclusively used just for SID generation? > Or is it ok as long as you dont use the ranges to create any new users? > > Thanks! > -- > _______________________________________________ > FreeIPA-users mailing list -- [email protected] > To unsubscribe send an email to [email protected] > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedorahosted.org/archives/list/[email protected] > Do not reply to spam, report it: > https://pagure.io/fedora-infrastructure/new_issue >
-- _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
