Re: Change UId range, renumber user ids

2021-02-03 Thread Todd Zullinger
Roberto Ragusa wrote: > while IFS=":" read a b c x; do [ $c -eq 0 ] && c=1;echo > "$a:$[10*c]:65536";done /etc/subuid Nice example. I enjoy reading a useful one-liner here. The "$[]" caught my eye, as it has come up a few times on the bash list. For anyone unfamiliar, it's an older, deprec

Re: Change UId range, renumber user ids

2021-02-03 Thread Friedrich Schäuffelhut
> On Wed, Feb 03, 2021 at 08:41:56PM -, Friedrich Schäuffelhut wrote: > > You should probably be aware that subuid/subgid isn't populated for > sssd/ldap accounts, so youll have to manage those manually. Thank you, I do understand that and I know how to manage it. > I think there are some pl

Re: Change UId range, renumber user ids

2021-02-03 Thread Jonathan Billings
On Wed, Feb 03, 2021 at 08:41:56PM -, Friedrich Schäuffelhut wrote: > > > On 2/3/21 6:18 PM, Friedrich Schäuffelhut wrote: > > > > If I understand correctly moving your IPA range may be problematic > > since you are actively using the uids. > > Moving user ids is not a concern. We are in a tr

Re: Change UId range, renumber user ids

2021-02-03 Thread Friedrich Schäuffelhut
> On 2/3/21 6:18 PM, Friedrich Schäuffelhut wrote: > > If I understand correctly moving your IPA range may be problematic > since you are actively using the uids. Moving user ids is not a concern. We are in a transition phase where most users still have a local account and use local uids. We are

Re: Change UId range, renumber user ids

2021-02-03 Thread Samuel Sieb
On 2/3/21 12:27 PM, Samuel Sieb wrote: On 2/3/21 9:18 AM, Friedrich Schäuffelhut wrote: I am a bit hesitant trying this without understanding what complications I could run in. Other than the need to "chown" all the home directories, it should be ok.  sssd caches the ids, but it should pick u

Re: Change UId range, renumber user ids

2021-02-03 Thread Samuel Sieb
On 2/3/21 9:18 AM, Friedrich Schäuffelhut wrote: I am a bit hesitant trying this without understanding what complications I could run in. Other than the need to "chown" all the home directories, it should be ok. sssd caches the ids, but it should pick up the new ones at login and I can't thi

Re: Change UId range, renumber user ids

2021-02-03 Thread Roberto Ragusa
On 2/3/21 6:18 PM, Friedrich Schäuffelhut wrote: We would like to fix this without reinstalling FreeIPA. We have already a number of hosts, users and certificates enrolled. I am now looking for a way to move the FreeIPA UID range to a different area, e.g. 10.000 - 20.000. We run 3 replicas con

Change UId range, renumber user ids

2021-02-03 Thread Friedrich Schäuffelhut
Hello, last year I set up a FreeIPA installation. It works very well! I lately discovered a problem with /etc/subuid and /etc/subgid used by rootless Podman (may be also Docker) containers. During setup we decided to start the UID range exactly at 100.000. We picked that for no real reason other