Welp welp, so I have found the issue but unsure how to fix.

My freeIPA config has UIDs start at 5000 (Web console > admin login > First 
Posix ID of the range value).

However due to legacy, I've manually added users starting at 1000 and have 
about 200 in the range between 1000 and 4999.

With that being said when I run the command;

ipa user-show some_existing_user_with_UUID_below_5000 --all | grep 
ipantsecurityidentifier

I get nothing.

However if I create a user having a UID of 5001 for example and run the same 
above command looking for an ipantsecurityidentifier, I get a successful result.

Soo, my questions are;

Shall I change my starting UID to be 1000 (Web console > admin login > First 
Posix ID of the range value).  And will that automagically add a 
ipantsecurityidentifier to my existing users?

Or

Can I simply add a ipantsecurityidentifier to my existing users?

Lastly and most importantly, thanks in advance for any guidance.
-- 
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to