Hi,

On Sun, Dec 15, 2024 at 12:26 PM Dirk Silkenbäumer via FreeIPA-users <
freeipa-users@lists.fedorahosted.org> wrote:

> Hello,
>
> I'm running version 4.9.13 on CentOS 8 Stream and wanted to upgrade to a
> supported version (Alma 8 or directly Alma 9).
>
> Both replica installations failed at the end 'Configuring SID generation':
> DEBUG   [7/7]: adding fallback group
> ...
> ldap_add: Operations error (1)
>         additional info: Allocation of a new value for range cn=posix
> ids,cn=distributed numeric assignment plugin,cn=plugins,cn=config failed!
> Unable to proceed.
>
> The installer wants to add new entry "cn=Default SMB
> Group,cn=groups,cn=accounts,dc=int,dc=example,dc=de", however the DNA range
> is not set and thus, it fails to add a group.
>
> As a workaround I tried:
> a) pause the installer and set the DNA range  (ipa-replica-manage
> dnarange-set ...) or
> b) before the installation on another master add the group (sed
> 's/$SUFFIX/dc=int,dc=example,dc=de/' default-smb-group.ldif | ldapmodify -v)
>
> Both methods worked, the latter appears a cleaner solution.
>
> Did I miss something in the documentation? Please share your thoughts.
>

Your issue is described in this KCS:
https://access.redhat.com/solutions/6958018 along with the recommended
solution.
HTH,

flo

>
> Kind regards
>
> Dirk
> --
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
> To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
> Do not reply to spam, report it:
> https://pagure.io/fedora-infrastructure/new_issue
>
-- 
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to