[Freeipa-users] Re: ERR: ID value too large

2018-08-02 Thread Rob Crittenden via FreeIPA-users
Роман Гинович via FreeIPA-users wrote: > Спасибо! Изучил ветку, почитал справку по ID range. > > Как я понял, ошибка происходит на этом месте: > if (uid_number >= UINT32_MAX || gid_number >= UINT32_MAX) { > LOG_FATAL("ID value too large.\n"); > ret = LDAP_CONSTRAINT_VIOLATION;

[Freeipa-users] DNS Forwarders

2018-08-02 Thread Andrew Meyer via FreeIPA-users
Is it possible to have a per server zone forwarder in /etc/named.conf and NOT break replication?___ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code

[Freeipa-users] Re: ERR: ID value too large

2018-08-02 Thread Роман Гинович via FreeIPA-users
Спасибо! Изучил ветку, почитал справку по ID range. Как я понял, ошибка происходит на этом месте: if (uid_number >= UINT32_MAX || gid_number >= UINT32_MAX) { LOG_FATAL("ID value too large.\n"); ret = LDAP_CONSTRAINT_VIOLATION; goto done; } Но у меня самый большой ui

[Freeipa-users] DNS issues

2018-08-02 Thread Andrew Meyer via FreeIPA-users
So I've had my FreeIPA setup for about 6 months now at my company.  As of recently i'm seeing some issues where if I try to dig against the servers I get nothing back.  I do not have a global forwarder setup because it should automatically go outbound if its not in its own table, correct? This o

[Freeipa-users] Trust from AD to IPA?

2018-08-02 Thread Chris Adams via FreeIPA-users
At my work, we've been tasked with setting up Active Directory for managing Windows desktop policy and users. We already have FreeIPA set up (although it needs to be rebuilt) for some of our users, groups, and Linux server policy. None of this is a huge setup (a few hundred users). We're conside

[Freeipa-users] confused about ipa-dns-install not creating reverse zone

2018-08-02 Thread Harald Dunkel via FreeIPA-users
Hi folks, I am confused: Setting up a new freeipa service (CentOS 7.5) using ipa-server-install or ipa-dns-install it asks me Do you want to search for missing reverse zones? [yes]: yes But then it did not create a reverse zone :-(. This doesn't look like documented. There is no "--no-

[Freeipa-users] Re: ERR: ID value too large

2018-08-02 Thread Роман Гинович via FreeIPA-users
Add some info. I checked all uid,gid in ldap, all current users and groups in range 1-10200. When i try change password in ipa user-mod or self-sevice (passwd) of current users, ipaNTHash don't generated. ___ FreeIPA-users mailing list -- freeipa-us

[Freeipa-users] Re: ERR: ID value too large

2018-08-02 Thread Alexander Bokovoy via FreeIPA-users
On to, 02 elo 2018, Роман Гинович via FreeIPA-users wrote: Hello, when i run [root@freeipa ~]# ipa-adtrust-install --add-sids all done, Configuring CIFS [1/23]: validate server hostname ... [22/23]: adding SIDs to existing users and groups This step may take considerable am

[Freeipa-users] ERR: ID value too large

2018-08-02 Thread Роман Гинович via FreeIPA-users
Hello, when i run [root@freeipa ~]# ipa-adtrust-install --add-sids all done, Configuring CIFS [1/23]: validate server hostname ... [22/23]: adding SIDs to existing users and groups This step may take considerable amount of time, please wait.. [23/23]: restarting s

[Freeipa-users] Do you want to search for missing reverse zones?

2018-08-02 Thread Harald Dunkel via FreeIPA-users
Hi folks, I am confused: Setting up a new freeipa service (CentOS 7.5) using ipa-server-install or ipa-dns-install it asks me Do you want to search for missing reverse zones? [yes]: yes But then it did not create a reverse zone :-( This doesn't look like https://access.redhat.com/docume