On Wed, Mar 09, 2016 at 01:29:14AM +0000, Darren Poulson wrote: > Hi, > > We¹re currently trying to set up an AD domain (great fun for a bunch of > linux admins not) so that we can get authentication working with various > bits of hardware that only support AD. We want this domain to trust our > existing FreeIPA setup. > > When trying to ipa-adtrust-install I¹m getting: > > [10/22]: adding RID bases > ipa : CRITICAL Found more than one local domain ID range with no RID > base set. > > >From reading up, I need to have the id ranges configured with primary and > secondary RIDs. Is there any way to do this, or do I have to delete and
You can use 'ipa idrange-mod ...' to add the RID bases to existing ranges. HTH bye, Sumit > recreate the ranges? And if I do that, what are the implications? > > IPA 4.2.0 (CentOS 7) > AD 2012R2 > > Cheers, > > Darren. > > > > -- > Manage your subscription for the Freeipa-users mailing list: > https://www.redhat.com/mailman/listinfo/freeipa-users > Go to http://freeipa.org for more info on the project -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project