<div dir="ltr"><div>I had this same issue and the value was only added after a password change. </div>Jeff <div> <div class="gmail_extra"> <div class="gmail_quote">On Wed, Feb 8, 2017 at 11:10 AM, Alexander Bokovoy <<a href="mailto:abokovoy@redhat.com" target="_blank">abokovoy@redhat.com</a>> wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On ke, 08 helmi 2017, Armaan Esfahani wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> I’ve been having issues with some of my IPA seemingly not getting SID’s after the install, even after running with the –add-sids modifier. I was wondering where the SID values are located so that I can take a look at what’s happening/ </blockquote> In the user object itself, ipaNTSecurityIdentifier attribute. If you have SIDs not generated, there are two potential issues that cause it: - sidgen plugin configuration looking at wrong basedn - ID ranges you have do not allow to map UID/GID to SID If you ran ipa-adtrust-install --add-sids and it generated nothing, look at /var/log/dirsrv/slapd-INSTANCE/errors log file. There should be at least two lines: [01/Feb/2017:14:28:24.189906631 +0100] sidgen_task_thread - [file ipa_sidgen_task.c, line 194]: Sidgen task starts ... [01/Feb/2017:14:28:24.192039515 +0100] sidgen_task_thread - [file ipa_sidgen_task.c, line 199]: Sidgen task finished [0]. If there are any errors causing issues with SID generation, they will be in between these two lines. -- / Alexander Bokovoy -- Manage your subscription for the Freeipa-users mailing list: <a href="https://www.redhat.com/mailman/listinfo/freeipa-users" rel="noreferrer" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a> Go to <a href="http://freeipa.org" rel="noreferrer" target="_blank">http://freeipa.org</a> for more info on the project</blockquote></div> </div></div></div>