On Mon, 22 May 2023, Andreas Binapfl via FreeIPA-users wrote:
So i could add something like:
Range name: DOMAIN.LOCAL_third_range
First Posix ID of the range: 10
Number of IDs in the range: 1590
Range type: local domain range
First RID of the corresponding RID range: 510000
First RID of the secondary RID range: 512000
To cover the IDs we might have missed too? No conflict with IPA default IDs or
something like that?
Something like that. You will get diagnostic from IPA CLI when you'd be
adding a range in case your parameters make this range overlapping with
the existing ones.
I would not recommend using POSIX IDs below 1000 in that range, though.
Are you really needed to cover POSIX IDs like that at Kerberos level?
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
