On Tuesday, July 30, 2019 22:35 PDT, Sumit Bose sbose@redhat.com wrote:
the version of SSSD you are using should automatically pick a new range if the RID is too large. Can you send your sssd.conf for a start to better understand your setup and see what might preventing SSSD from picking a new range?
The configuration file is generated by "realm join". Are there any specific patterns you'd like to see from the logs that might provide more information?
[sssd] domains = business.com config_file_version = 2 services = nss, pam
[domain/business.com] debug = 6 ad_domain = business.com krb5_realm = BUSINESS.COM realmd_tags = manages-system joined-with-samba cache_credentials = False id_provider = ad krb5_store_password_if_offline = True default_shell = /bin/bash ldap_id_mapping = True use_fully_qualified_names = False fallback_homedir = /home/business/%u access_provider = ad