Re: Upgrade to FreeIPA 4.9.12 on RHEL 8.9 caused web UI login and ipa command to stop working

[Oliver Nixon]

Hi,

I'm encountering the same issue after upgrading to 4.9.12.
I had previously imported users from another FreeIPA deployment and their UIDs were outside of the defined ID ranges.
I've created a new ID range to encompass these and run the following but the SIDs still don't get generated:
]# /usr/libexec/ipa/oddjob/org.freeipa.server.config-enable-sid   --netbios-name DOMAIN-NAME   --add-sids
Configuring SID generation
  [1/8]: creating samba domain object
Samba domain object already exists
  [2/8]: adding admin(group) SIDs
Admin SID already set, nothing to do
Admin group SID already set, nothing to do
  [3/8]: adding RID bases
RID bases already set, nothing to do
  [4/8]: updating Kerberos config
'dns_lookup_kdc' already set to 'true', nothing to do.
  [5/8]: activating sidgen task
Sidgen task plugin already configured, nothing to do
  [6/8]: restarting Directory Server to take MS PAC and LDAP plugins changes into account
  [7/8]: adding fallback group
Fallback group already set, nothing to do
  [8/8]: adding SIDs to existing users and groups
This step may take considerable amount of time, please wait..
Done.