[Freeipa-users] AD integration: Could not convert objectSID to a UNIX ID

[Alexander Bokovoy]

On Tue, 17 Mar 2015, Guertin, David S. wrote:
>> When you changed idrange, it helps to remove SSSD cache, both on IPA
>> master and IPA clients and restart SSSD.
>
>OK, I cleared the cache and restarted sssd with:
>
>sss_cache -E
>systemctl restart sssd
>
>Still no change in the error: Could not convert objectSID
>[S-1-5-21-1983215674-46037090-646806464-245906] to a UNIX ID
I don't think sss_cache -E removes cached idrange objects. You need to
delete the databases in /var/lib/sss/db/.

>This is RHEL 7 running sssd-1.12.2 and ipa-server-4.1.0.
You mean RHEL 7.1, right?
-- 
/ Alexander Bokovoy