Is there anyway to just delete all these SID requirements?  My ipa domain doesn't have a trust to anything windows and there's no plan to ever set that up. 

Been trying to add the RID and it fails but doesn't tell me why it failed.

On 2/1/24 11:43, Florence Blanc-Renaud via FreeIPA-users wrote:
Hi,


On Thu, Feb 1, 2024 at 12:51 PM Steve Berg via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote:
Still not working.  I do not have any trust set up with any active
directory currently, we have a AD running on the network but that and my
ipa domain don't trust each other in any way.

Got two idranges setup:
-----------
   Range name: domain_id_range
   First Posix ID of the range: 824400000
   Number of IDs in the range: 200000
   First RID of the corresponding RID range: 1000
   First RID of the secondary RID range: 100000000
   Range type: local domain range

   Range name: EDIPIs_id_range
   First Posix ID of the range: 1009210100
   Number of IDs in the range: 619332697
   Range type: local domain range
-----------
The above range is missing RID base and secondary rid base.
You can refer to this KCS: https://access.redhat.com/solutions/7052703 especially section 3. Fixing ID range issues. You will have to add ipabaserid and ipasecondarybaserid to the range.
RID Values from 1,000-200,999 and 100,000,000-100,199,999 are already taken by the id range domain_id_range, you can pick any values not overlapping.
flo


-- 
//-        Fixer of that which is broke        -//
//-        Home = sberg@mississippi.com        -//
//- Sinners can repent, but stupid is forever. -//