Hi,
I really have no idea if the wheel group will cause any issue as it is defined in IPA and probably also locally. Usually wheel is used to define the set of users allowed to perform su but in IPA the proper way is to create sudo rules and add members.
If you feel ok to keep the wheel group in IPA (but once again, hum...), the idrange needs to have primary and secondary rid bases.
Currently you have the following:
| Size | POSIX ids start | POSIX ids end | RIDs start | RIDs end | 2nd RIDs start | 2nd RIDs end |
| 200,000 | 396,000,000 | 396,200,000 | 1,000 | 201,000 | 100,000,000 | 100,200,000 |
| 39,000 | 1,000 | 40,000 | 301,000 | 340,000 | 100,300,000 | 100,339,000 |
| 1 | 112 | 113 |
|
|
|
|
The following RIDs are already taken: [1,000-201,000] [301,000-340,000], [100,000,000-100,200,000] and [100,300,000-100,339,000]. Pick any value outside of those ranges and it won't complain about overlaps.
On the other hand, if you decide to remove the idrange, you need to do it manually with ldapdelete:
ldapdelete -D "cn=Directory manager" -W cn=asterisk_system_user,cn=ranges,cn=etc,dc=example,dc=com
and then restart ipa.
Sorry I'm not able to provide a definite answer, but it's hard to know if removing your wheel group from IPA would break anything. Maybe you have applications that rely on it, maybe it was added un-intentionally. Without clear understanding I can't really advise.
flo