<div dir="ltr"><div class="gmail_default" style="font-family:'courier new',monospace">Thanks for the quick reply. I am using 1.9.2 on centos 6. Which log file do you need? sssd.log? It is about 13 MB big. </div><div class="gmail_default" style="font-family:'courier new',monospace">
<br></div><div class="gmail_default" style="font-family:'courier new',monospace">Regards</div><div class="gmail_default" style="font-family:'courier new',monospace">Melvin</div></div><div class="gmail_extra">
<br><br><div class="gmail_quote">2013/9/30 Sumit Bose <span dir="ltr"><<a href="mailto:sbose@redhat.com" target="_blank">sbose@redhat.com</a>></span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="im">On Mon, Sep 30, 2013 at 02:07:12PM +0200, Melvin Williams wrote:<br>
> Hello everybody,<br>
><br>
> I'm trying to change the default ldap_idmap_range_min, ldap_idmap_range_max<br>
> and ldap_idmap_range_size. First of all I'm not sure where to place them. I<br>
> tried placing them in [domain/DOMAINNAME]. If I do so sssd service fails to<br>
<br>
</div>the domain section is the right place, also for<br>
ldap_idmap_default_domain_sid and ldap_idmap_default_domain. Btw it is<br>
sufficient to put one of the two in the config file.<br>
<div class="im"><br>
> start. I can't find any hints in logs even though I put the debug_level on<br>
> 0xFFF0. Then I placed them in the [sssd] section. The service starts now<br>
<br>
</div>Which version of sssd are you using. I cannot reproduce this with the<br>
current version. Feel free to send me the logs file.<br>
<br>
bye,<br>
Sumit<br>
<div><div class="h5"><br>
> but it seems that the values are ignored. My sssd.conf looks as follows:<br>
><br>
> [sssd]<br>
><br>
> services = nss, pam<br>
> config_file_version = 2<br>
> domains = <a href="http://domain.name" target="_blank">domain.name</a><br>
> debug_level = 0xFFF0<br>
><br>
> ldap_idmap_default_domain_sid = SID<br>
> ldap_idmap_default_domain = <a href="http://domain.name" target="_blank">domain.name</a><br>
> [nss]<br>
><br>
> default_shell = /bin/bash<br>
><br>
> [pam]<br>
><br>
><br>
> [domain/<a href="http://domain.name" target="_blank">domain.name</a>]<br>
><br>
> ad_hostname = <a href="http://hostname.domain.name" target="_blank">hostname.domain.name</a><br>
> ad_server = <a href="http://dc1.domain.name" target="_blank">dc1.domain.name</a><br>
> ad_backup_server = <a href="http://dc2.domain.name" target="_blank">dc2.domain.name</a><br>
> ad_domain = <a href="http://domain.name" target="_blank">domain.name</a><br>
><br>
> #ldap_idmap_range_min = 100000<br>
> #ldap_idmap_range_max = 200000<br>
> #ldap_idmap_range_size = 10000<br>
><br>
> ldap_schema = ad<br>
> ldap_id_mapping=true<br>
> id_provider = ad<br>
> ldap_sasl_mech = gssapi<br>
> ldap_sasl_authid = dc1$@<a href="http://DONAIN.NAME" target="_blank">DONAIN.NAME</a><br>
><br>
> access_provider = simple<br>
><br>
> override_homedir = /home/%d/%u<br>
> # on large directories, you may want to disable enumeration for performance<br>
> reasons<br>
> enumerate = true<br>
><br>
> auth_provider = krb5<br>
> chpass_provider = krb5<br>
> krb5_realm = <a href="http://DOMAIN.NAME" target="_blank">DOMAIN.NAME</a><br>
> krb5_server = <a href="http://dc1.domain.name" target="_blank">dc1.domain.name</a><br>
> krb5_backup_server = <a href="http://dc2.domain.name" target="_blank">dc2.domain.name</a><br>
> krb5_kpasswd = <a href="http://dc1.domain.name" target="_blank">dc1.domain.name</a><br>
> krb5_backup_kpasswd = <a href="http://dc2.domain.name" target="_blank">dc2.domain.name</a><br>
> krb5_keytab = /etc/krb5.sssd.keytab<br>
> ldap_krb5_init_creds = true<br>
><br>
> ldap_referrals = false<br>
> ldap_uri = ldap://<a href="http://dc1.domain.name" target="_blank">dc1.domain.name</a>,ldap://<a href="http://dc2.domain.name" target="_blank">dc2.domain.name</a><br>
><br>
> ldap_search_base = some_search_base<br>
> dyndns_update=false<br>
><br>
> I hope somebody can help me with this issue.<br>
><br>
> Thanks<br>
<br>
</div></div>> _______________________________________________<br>
> sssd-users mailing list<br>
> <a href="mailto:sssd-users@lists.fedorahosted.org">sssd-users@lists.fedorahosted.org</a><br>
> <a href="https://lists.fedorahosted.org/mailman/listinfo/sssd-users" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/sssd-users</a><br>
<br>
_______________________________________________<br>
sssd-users mailing list<br>
<a href="mailto:sssd-users@lists.fedorahosted.org">sssd-users@lists.fedorahosted.org</a><br>
<a href="https://lists.fedorahosted.org/mailman/listinfo/sssd-users" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/sssd-users</a><br>
</blockquote></div><br></div>