On (15/10/14 22:39), Prajwal Kumar wrote:
>Hi Sumit,
>
>When I set ldap_idmap_range_size = 4000000, SSSD fails to start:
>
>(Wed Oct 15 12:29:52 2014) [sssd[be[dbg]]] [sdap_idmap_init] (0x0100):
>Initializing [6] domains for ID-mapping
>(Wed Oct 15 12:29:52 2014) [sssd[be[dbg]]] [sdap_idmap_add_domain]
>(0x1000): Adding domain [S-1-5-21-1606980848-1965331169-1417001333] as
>slice [2392]
        ^^^^
This number should not be higher than 500.

Explanation:
    the default value of ldap_idmap_range_min is 200.000
    the default value of ldap_idmap_range_max is 2.000.200.000
    difference is 2.000.000.000

You modified ldap_idmap_range_size to value 4.000.000
    * this option specifies the number of IDs available for each slice

We have space for 2.000.000.000 IDs and each slice can contain 4.000.000 IDs.
So ther is space for 500 slices. The log file shows that sssd tried to store
SID into slice with numer 2392.

man sssd-ldap says (section ID MAPPING)
Please note that changing the ID mapping related configuration options
will cause user and group IDs to change. At the moment, SSSD does not
support changing IDs, so the SSSD database must be removed.

Please try to remove sssd cache (rm -f /var/lib/sss/db/*)
I hope problem will be fixed after starting sssd with clean cache.

LS

_______________________________________________
sssd-users mailing list
sssd-users@lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users