On to, 02 elo 2018, Роман Гинович via FreeIPA-users wrote:
Hello, when i run
[root@freeipa ~]# ipa-adtrust-install --add-sids
all done,
Configuring CIFS
[1/23]: validate server hostname
...
[22/23]: adding SIDs to existing users and groups
This step may take considerable amount of time, please wait..
[23/23]: restarting smbd
Done configuring CIFS.
but in dirserv logs:
[02/Aug/2018:10:37:10] - ERR - sidgen_task_thread - [file ipa_sidgen_task.c, line
194]: Sidgen task starts ...
[02/Aug/2018:10:37:10] - ERR - find_sid_for_ldap_entry - [file ipa_sidgen_common.c,
line 483]: ID value too large.
[02/Aug/2018:10:37:10] - ERR - do_work - [file ipa_sidgen_task.c, line 154]: Cannot
add SID to existing entry.
[02/Aug/2018:10:37:10] - ERR - sidgen_task_thread - [file ipa_sidgen_task.c, line
199]: Sidgen task finished [19].
my ID range
[root@freeipa ~]# ipa idrange-find
---------------
1 range matched
---------------
Range name: DOMAIN_id_range
First Posix ID of the range: 10000
Number of IDs in the range: 10000
First RID of the corresponding RID range: 1000
First RID of the secondary RID range: 100000000
Range type: local domain range
------------------------------
Количество вернутых значений 1
------------------------------
How to fix it?
When i create new user ipaNTHash was created and all work fine. But already created users
don't have ipaNTHash.
https://www.redhat.com/archives/freeipa-users/2017-February/msg00114.html
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland