But SSSD supports adding a new id-range with 'ipa idrange-add
name should be unique, e.g. the name of the other range of the AD domain
with a '_2' suffix. The --base-id can be directly on top of the end of
the existing id-range, the --rid-base is 200000 and --dom-sid and
--dom-name are the same as for the existing id-range.
When you say baseid can be directly on top of the end of the existing id
range, does that mean it would be the baseid of the existing range + 200000?