[Freeipa-users] Re: ipa-sidgen-task failing, can't make trust to work

[Francis Augusto Medeiros-Logeay]

Thanks Alexander:

---------------
1 range matched
---------------
  dn: cn=IPA.MYDOMAIN_id_range,cn=ranges,cn=etc,dc=ipa,dc=mydomain
  cn: IPA.MYDOMAIN_id_range
  ipabaseid: 1987000000
  ipaidrangesize: 200000
  ipabaserid: 0
  ipasecondarybaserid: 100000000
  iparangetype: ipa-local
  objectclass: top
  objectclass: ipaIDrange
  objectclass: ipaDomainIDRange
----------------------------
Number of entries returned 1
----------------------------

Is that wrong?

Best,

Francis 

>  On 5 Apr 2022, at 20:48, Alexander Bokovoy
> <abokovoy(a)redhat.com&gt; wrote:
>  
>  On ma, 04 huhti 2022, Francis Augusto Medeiros-Logeay via FreeIPA-users wrote:
> > Thanks Florence,
> > 
> > I ran ipa-adtrust-install again, but this time with the `--debug` option, but I
> don't really see the reason for the error:
>  
>  389-ds errors log is quite clear about the error:
>  
> > [04/Apr/2022:20:07:55.442844902 +0200] - ERR - get_ranges - [file
> ipa_sidgen_common.c, line 276]: Failed to convert LDAP entry to range struct.
>  
>  this means that sidgen plugin was unable to parse your ID ranges.
>  
>  Can you please show them?
>  
>  ipa idrange-find --all --raw
>  
>  -- 
>  / Alexander Bokovoy
>  Sr. Principal Software Engineer
>  Security / Identity Management Engineering
>  Red Hat Limited, Finland
>