Tien Cao Huy via FreeIPA-users wrote: > Hello Rob Crittenden, > I've seen: > [16/Jul/2025:00:39:22.029330259 +0700] - ERR - find_sid_for_ldap_entry - > [file ipa_sidgen_common.c, line 533]: Cannot convert Posix ID [1445403152] > into an unused SID on entry > [uid=yen.tb,cn=users,cn=accounts,dc=domain,dc=com]. > [16/Jul/2025:00:39:22.030330780 +0700] - ERR - find_sid_for_ldap_entry - > [file ipa_sidgen_common.c, line 533]: Cannot convert Posix ID [1445403023] > into an unused SID on entry > [uid=van.ptb4,cn=users,cn=accounts,dc=domain,dc=com]. > [16/Jul/2025:00:39:22.031736708 +0700] - ERR - find_sid_for_ldap_entry - > [file ipa_sidgen_common.c, line 533]: Cannot convert Posix ID [1445400888] > into an unused SID on entry > [uid=hoa.hlt,cn=users,cn=accounts,dc=domain,dc=com]. > [16/Jul/2025:00:39:22.033612231 +0700] - ERR - find_sid_for_ldap_entry - > [file ipa_sidgen_common.c, line 533]: Cannot convert Posix ID [1445400982] > into an unused SID on entry > [uid=hung.dn,cn=users,cn=accounts,dc=domain,dc=com]. > [16/Jul/2025:00:39:22.034985238 +0700] - ERR - find_sid_for_ldap_entry - > [file ipa_sidgen_common.c, line 533]: Cannot convert Posix ID [1445402012] > into an unused SID on entry > [uid=phuong.lv,cn=users,cn=accounts,dc=domain,dc=com]. > [16/Jul/2025:00:39:22.036315746 +0700] - ERR - find_sid_for_ldap_entry - > [file ipa_sidgen_common.c, line 533]: Cannot convert Posix ID [1445401642] > into an unused SID on entry > [uid=nga.nt3,cn=users,cn=accounts,dc=domain,dc=com]. > [16/Jul/2025:00:39:22.037585485 +0700] - ERR - find_sid_for_ldap_entry - > [file ipa_sidgen_common.c, line 533]: Cannot convert Posix ID [1445401508] > into an unused SID on entry > [uid=mai.ha,cn=users,cn=accounts,dc=domain,dc=com]. > [16/Jul/2025:00:39:22.038764544 +0700] - ERR - do_work - [file > ipa_sidgen_task.c, line 166]: Finished with 3406 failures, please check the > log. > [16/Jul/2025:00:39:22.063845108 +0700] - ERR - sidgen_task_thread - [file > ipa_sidgen_task.c, line 204]: Sidgen task finished [3406]. >
These users UID are not in a configured range in IPA. Per a previous post you have one range from 748400000 - 748599999. Why are these UIDs so far outside of what your other users are configured with? Migrated users maybe? Legacy? If the UIDs really are correct you can create a new IPA range to cover their range and re-run sid generation. rob -- _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue