Finally got around to fixing this:
On Tue, May 24, 2016 at 5:15 PM, Martin Kosek <mko...@redhat.com> wrote:
> On 05/24/2016 04:07 PM, Rob Crittenden wrote:
>> Traiano Welcome wrote:
>>> I have IPA server 4,2 running on centos 7
>>> This morning, after many months of stable operation, I tried to add a
>>> user and got this error via the web interface:
>>> Operations error: Allocation of a new value for range cn=posix
>>> ids,cn=distributed numeric assignment plugin,cn=plugins,cn=config
>>> failed! Unable to proceed.
>>> So basically, can't add any new users.
>>> Would anyone know how I can troubleshoot this kind of IPA error, or
>>> possibly have come across and resolved it before ?
>> At install a range of 100k id's is allocated to IPA. With each new master
>> range is divided in half. It appears you've exhausted one of the masters.
>> What you need to do is take an inventory of what ranges (if any) are
>> to various masters then you should be able to move things around (this is
>> assuming of course that you haven't exhausted the entire range).
>> ipa-replica-manage list will give you a list of the IPA masters.
>> ipa-replica-manage dnarange-show <master> and ipa-replica-manage
>> dnanextrange-show <master> will help discover what is available.
>> If you have things in nextrange then I'd start there with reallocation.
>> a next range of 0-0 removes the next range (e.g. make it available for a
>> primary range).
>> Take care when actually re-assigning ranges.
This kind of mental gymnastics will probably land you in a lot of trouble :-)
> For the record, what currently did not work is when user is being added on a
> master that does not have direct replication connect to other master with
> available range.
> This is improved from FreeIPA 4.3.1+:
yum update to the most recent patch levels in the 4.2 series seems to fix this.
Manage your subscription for the Freeipa-users mailing list:
Go to http://freeipa.org for more info on the project