Hi,
I was out for a couple of weeks and this stood on standby. Checking the dnarange:
# ipa-replica-manage dnarange-show
Directory Manager password:
idm.dom0.io: 1562200006-1562399999
ns1.dom0.io: No range set
ns2.dom0.io: No range set
# ipa idrange-find
---------------
1 range matched
---------------
Range name: DOM0.IO_id_range
First Posix ID of the range: 1562200000
Number of IDs in the range: 200000
First RID of the corresponding RID range: 1000
First RID of the secondary RID range: 100000000
Range type: local domain range
----------------------------
Number of entries returned 1
----------------------------
It seems like I have enough space in the range to accommodate new servers, no?
The master that has the range assigned is only accessible from private network, the ns1
and ns2 are accessible from the public network. From what I read, it would be supposed for
the replica ns1 to get a range from the master idm, or is that not so?
Should the ns3 server have a direct access to the server with the dna range configured?
Is the solution adding a range to the ns1 master replica?
Thank you.