[Freeipa-users] Re: New primary rid range overlaps with existing primary rid range

Think i found a way to change it. For documentation purpose if someone else has this problem: In /etc/ipa/default.conf i found our ldap_uri Then issued this commands: #verify correct dn ldapsearch -b 'cn=DOMAIN.LOCAL_new_range,cn=ranges,cn=etc,dc=domain,dc=local' ldapmodify -H ldapi://%2Frun%2Fslapd-DOMAIN-LOCAL.socket dn: cn=DOMAIN.LOCAL_new_range,cn=ranges,cn=etc,dc=domain,dc=local changetype: modify add: ipabaserid ipabaserid:500000 commit with enter on an empty line. Did the same for add: ipasecondarybaserid ipasecondarybaserid:503000 Now "ipa config-mod --enable-sid --add-sids" did run successful. Let's hope the auth problems are fixed too =) Thanks for your time and help!