Oliver Nixon via FreeIPA-users wrote: > Hi, > > I'm encountering the same issue after upgrading to 4.9.12. > I had previously imported users from another FreeIPA deployment and their > UIDs were outside of the defined ID ranges. > I've created a new ID range to encompass these and run the following but the > SIDs still don't get generated: > ]# /usr/libexec/ipa/oddjob/org.freeipa.server.config-enable-sid > --netbios-name DOMAIN-NAME --add-sids > Configuring SID generation > [1/8]: creating samba domain object > Samba domain object already exists > [2/8]: adding admin(group) SIDs > Admin SID already set, nothing to do > Admin group SID already set, nothing to do > [3/8]: adding RID bases > RID bases already set, nothing to do > [4/8]: updating Kerberos config > 'dns_lookup_kdc' already set to 'true', nothing to do. > [5/8]: activating sidgen task > Sidgen task plugin already configured, nothing to do > [6/8]: restarting Directory Server to take MS PAC and LDAP plugins changes > into account > [7/8]: adding fallback group > Fallback group already set, nothing to do > [8/8]: adding SIDs to existing users and groups > This step may take considerable amount of time, please wait.. > Done.
You need to look in /var/log/dirsrv/slapd-REALM/errors for the reason for failure. rob -- _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
