But SSSD supports adding a new id-range with 'ipa idrange-add ....' the
name should be unique, e.g. the name of the other range of the AD domain
with a '_2' suffix. The --base-id can be directly on top of the end of
the existing id-range, the --rid-base is 200000 and --dom-sid and
--dom-name are the same as for the existing id-range.