[Freeipa-users] Re: ipantuserattrs - newly created users lack

On to, 07 loka 2021, lejeczek via FreeIPA-users wrote:

Seems like something is not healthy between three masters. -> $ ipa-replica-manage dnarange-show 1: 1108-2000 2: No range set 3: No range set

Is next safe step to set those ranges manually with 'ipa-replica-manage' for each master?

Looks like something you did caused DNA range to be set to a wrong value compared to ID range for this deployment. You need to fix the DNA range on the first replica to be consistent with your ID range.

You can also add a separate local ID range to cover 1108-2000 so that IDs already issued would fit it and then SIDs could be generated for those users.