On ma, 06 elo 2018, Роман Гинович via FreeIPA-users wrote:
In my first post:
[02/Aug/2018:10:37:10] - ERR - sidgen_task_thread - [file ipa_sidgen_task.c, line 194]:
Sidgen task starts ...
[02/Aug/2018:10:37:10] - ERR - find_sid_for_ldap_entry - [file ipa_sidgen_common.c, line
483]: ID value too large.
[02/Aug/2018:10:37:10] - ERR - do_work - [file ipa_sidgen_task.c, line 154]: Cannot add
SID to existing entry.
[02/Aug/2018:10:37:10] - ERR - sidgen_task_thread - [file ipa_sidgen_task.c, line 199]:
Sidgen task finished [19].
Can you find an entry that has '-1' or non-number
value in uidNumber or gidNumber?
something like
ldapsearch -Y GSSAPI -b cn=accounts,$PREFIX '(|(uidNumber=*)(gidNumber=*)'
uidNumber gidNumber
and check the values.
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland