Should I add the same range to this machine or give each one it's own id range? <div class="gmail_quote">On Apr 17, 2015 3:53 AM, "Sumit Bose" <<a href="mailto:sbose@redhat.com">sbose@redhat.com</a>> wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On Thu, Apr 16, 2015 at 07:46:55PM -0400, Bryan Pearson wrote: > I ran this comand on each of my IPA servers and one returned usable > response: ipa idrange-find > > --------------- > 1 range matched > --------------- > Range name: HOSTNAME.LAN_id_range > First Posix ID of the range: 1920200000 > Number of IDs in the range: 300000 > Range type: local domain range > ---------------------------- > Number of entries returned 1 > ---------------------------- > > While trying to add a new user on one of the other severs I recieve: > *** > Operations error: Allocation of a new value for range cn=posix > ids,cn=distributed numeric assignment plugin,cn=plugins,cn=config > failed! Unable to proceed. > *** This is expected, unfortunately the idranges used to manage different idranges in environments with trust and the range used by the DNA plugin to assign IDs to local users and groups are currently not connected. There is ticket <a href="https://fedorahosted.org/freeipa/ticket/3609" target="_blank">https://fedorahosted.org/freeipa/ticket/3609</a> to fix this. bye, Sumit > > Should I go forward on other masters and do: > > *** > ldapmodify -x -D 'cn=Directory Manager' -W > Enter LDAP Password: > dn: cn=Posix IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config > changetype: modify > replace: dnaNextValue > dnaNextValue: 1689700000 > - > replace: dnaMaxValue > dnaMaxValue: 1689799999 > ^D > > modifying entry "cn=Posix IDs,cn=Distributed Numeric Assignment > Plugin,cn=plugins,cn=config" > *** > > -- > Manage your subscription for the Freeipa-users mailing list: > <a href="https://www.redhat.com/mailman/listinfo/freeipa-users" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a> > Go to <a href="http://freeipa.org" target="_blank">http://freeipa.org</a> for more info on the project </blockquote></div>