I'm try add extra range, but get error.
ipa idrange-add DOMAIN_id_range_extra --base-id=10000
--range-size=10000 --rid-base=500000 --secondary-rid-base=510000 --type=ipa-local
ipa: ERROR: Constraint violation: New base range overlaps with existing base range.
ipa idrange-add DOMAIN_id_range_extra --base-id=10000
--range-size=10000 --rid-base=200000000 --secondary-rid-base=200020000 --type=ipa-local
ipa: ERROR: Constraint violation: New base range overlaps with existing base range.
My current id range covers all existing users.
ipa idrange-find
---------------
1 range matched
---------------
Range name: DOMAIN_id_range
First Posix ID of the range: 10000
Number of IDs in the range: 10000
First RID of the corresponding RID range: 1000
First RID of the secondary RID range: 100000000
Range type: local domain range
------------------------------
Количество вернутых значений 1
------------------------------
ldapsearch -h freeipa.domain -x -D 'cn=Directory Manager' -b
"cn=accounts,dc=domain" -W '(uid=*)' | grep -E
"(uid|gid)"Number | awk '{print $2}' | sort | uniq | sort -n
Enter LDAP Password:
10000
10001
10007
...
10161
10164
10165
When i run ipa-adtrust-install i get error - "ID value too large"
I found this code in source:
if (uid_number >= UINT32_MAX || gid_number >= UINT32_MAX) {
LOG_FATAL("ID value too large.\n");
ret = LDAP_CONSTRAINT_VIOLATION;
goto done;
}
How i can get this error if my uid/gid in range 10000-10165?