<html><head> <meta http-equiv="Content-Type" content="text/html; charset=Windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;"><div>I’ve been getting messages like these when I try the id command for a test AD domain user:</div><div><br></div><div><div>(Tue Mar 17 17:10:34 2015) [sssd[be[unix.test.osuwmc]]] [sdap_get_primary_name] (0x0400): Processing object farus@test.osuwmc</div><div>(Tue Mar 17 17:10:34 2015) [sssd[be[unix.test.osuwmc]]] [sdap_save_user] (0x0400): Processing user farus@test.osuwmc</div><div>(Tue Mar 17 17:10:34 2015) [sssd[be[unix.test.osuwmc]]] [sdap_save_user] (0x1000): Mapping user [farus@test.osuwmc] objectSID [S-1-5-21-226267946-722566613-1883572810-398410] to unix ID</div><div>(Tue Mar 17 17:10:34 2015) [sssd[be[unix.test.osuwmc]]] [sdap_idmap_sid_to_unix] (0x0080): Could not convert objectSID [S-1-5-21-226267946-722566613-1883572810-398410] to a UNIX ID</div><div>(Tue Mar 17 17:10:34 2015) [sssd[be[unix.test.osuwmc]]] [sdap_save_user] (0x0020): Failed to save user [adm-faru03@test.osuwmc]</div></div><div><br></div><div>Various sources all inicate that its a range issue with ldap_idmap_range_size. I’ve tried several large values of just ldap_idmap_range_size as well as adding ldap_idmap_range_min and ldap_idmap_range_range. All I can figure is that perhaps sssd is ignoring the values? Between changing values I did stop sssd, delete the cache and restart it. This is RHEL7 fully up to date. My SSSD shows 1.12.2-58.</div><div><br></div><div>Here is my full sssd.conf.</div><div><br></div><div><div>[domain/unix.test.osuwmc]</div><div>debug_level = 9</div><div>subdomains_provider = ipa</div><div>cache_credentials = True</div><div>krb5_store_password_if_offline = True</div><div>ipa_domain = unix.test.osuwmc</div><div>id_provider = ipa</div><div>auth_provider = ipa</div><div>access_provider = ipa</div><div>ipa_hostname = mid-ipa-vp01.unix.test.osuwmc</div><div>chpass_provider = ipa</div><div>ipa_server = mid-ipa-vp01.unix.test.osuwmc</div><div>ipa_server_mode = True</div><div>ldap_tls_cacert = /etc/ipa/ca.crt</div><div>#ldap_idmap_range_min = 2000</div><div>#ldap_idmap_range_size = 900000</div><div>#ldap_idmap_range_range = 3602000</div><div>ldap_idmap_range_size=1000000</div><div>ldap_id_mapping = True</div><div><br></div><div>[sssd]</div><div>services = nss, sudo, pam, ssh, pac</div><div>config_file_version = 2</div><div><br></div><div><br></div><div>domains = unix.test.osuwmc</div><div>[nss]</div><div>homedir_substring = /home</div><div><br></div><div>[pam]</div><div><br></div><div>[sudo]</div><div><br></div><div>[autofs]</div><div><br></div><div>[ssh]</div><div><br></div><div>[pac]</div><div><br></div><div>[ifp]</div></div><div><br></div></body></html>