Since I got the service back up and running, I was continuing my tests/learning by following the steps on the V4 Migrating existing environments to Trust page:
http://www.freeipa.org/page/V4/Migrating_existing_environments_to_Trust#How_to_Test [root@vmts-linuxidm ~]# id [email protected] uid=1750693931([email protected]) gid=1750693931([email protected]) groups=1750693931([email protected]),1750687326([email protected]) Success and joy. [root@vmts-linuxidm ~]# ipa idoverrideuser-add 'Default Trust View' [email protected] --uid 1506 ------------------------------------------------------- Added User ID override "[email protected]" ------------------------------------------------------- Anchor to override: [email protected] UID: 1506 Great. [root@vmts-linuxidm ~]# sudo systemctl restart sssd [root@vmts-linuxidm ~]# id [email protected] uid=1750693931([email protected]) gid=1750693931([email protected]) groups=1750693931([email protected]),1750687326([email protected]) Huh? The documentation linked to above says that uid should now be 1506? I went searching in the website - took me a while to find it, but it was there - see attached image. The uid had been updated *somewhere*, but the id command wasn't seeing it. Maybe a full ipa restart would help? Ipactl restart And samba is failing again. Ouch. Brb. L. This email (including any attachments or links) may contain confidential and/or legally privileged information and is intended only to be read or used by the addressee. If you are not the intended addressee, any use, distribution, disclosure or copying of this email is strictly prohibited. Confidentiality and legal privilege attached to this email (including any attachments) are not waived or lost by reason of its mistaken delivery to you. If you have received this email in error, please delete it and notify us immediately by telephone or email. Peter MacCallum Cancer Centre provides no guarantee that this transmission is free of virus or that it has not been intercepted or altered and will not be liable for any delay in its receipt.
-- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
