On ma, 06 elo 2018, Alexander Bokovoy via FreeIPA-users wrote:
On ma, 06 elo 2018, Роман Гинович via FreeIPA-users wrote:
>In my first post:
>
>[02/Aug/2018:10:37:10] - ERR - sidgen_task_thread - [file ipa_sidgen_task.c, line
194]: Sidgen task starts ...
>[02/Aug/2018:10:37:10] - ERR - find_sid_for_ldap_entry - [file ipa_sidgen_common.c,
line 483]: ID value too large.
>[02/Aug/2018:10:37:10] - ERR - do_work - [file ipa_sidgen_task.c, line 154]: Cannot
add SID to existing entry.
>[02/Aug/2018:10:37:10] - ERR - sidgen_task_thread - [file ipa_sidgen_task.c, line
199]: Sidgen task finished [19].
Can you find an entry that has '-1' or non-number value in uidNumber or
gidNumber?
something like
ldapsearch -Y GSSAPI -b cn=accounts,$PREFIX '(|(uidNumber=*)(gidNumber=*)'
uidNumber gidNumber
missed one closing bracket:
'(|(uidNumber=*)(gidNumber=*))'
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland