On to, 07 loka 2021, lejeczek via FreeIPA-users wrote:
Seems like something is not healthy between three masters.
-> $ ipa-replica-manage dnarange-show
1: 1108-2000
2: No range set
3: No range set
Is next safe step to set those ranges manually with
'ipa-replica-manage' for each master?
Looks like something you did caused DNA range to be set to a wrong value
compared to ID range for this deployment. You need to fix the DNA range
on the first replica to be consistent with your ID range.
You can also add a separate local ID range to cover 1108-2000 so that
IDs already issued would fit it and then SIDs could be generated for
those users.
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam on the list, report it:
https://pagure.io/fedora-infrastructure
