On (15/10/14 22:39), Prajwal Kumar wrote:
Hi Sumit,
When I set ldap_idmap_range_size = 4000000, SSSD fails to start:
(Wed Oct 15 12:29:52 2014) [sssd[be[dbg]]] [sdap_idmap_init] (0x0100): Initializing [6] domains for ID-mapping (Wed Oct 15 12:29:52 2014) [sssd[be[dbg]]] [sdap_idmap_add_domain] (0x1000): Adding domain [S-1-5-21-1606980848-1965331169-1417001333] as slice [2392]
^^^^ This number should not be higher than 500.
Explanation: the default value of ldap_idmap_range_min is 200.000 the default value of ldap_idmap_range_max is 2.000.200.000 difference is 2.000.000.000
You modified ldap_idmap_range_size to value 4.000.000 * this option specifies the number of IDs available for each slice
We have space for 2.000.000.000 IDs and each slice can contain 4.000.000 IDs. So ther is space for 500 slices. The log file shows that sssd tried to store SID into slice with numer 2392.
man sssd-ldap says (section ID MAPPING) Please note that changing the ID mapping related configuration options will cause user and group IDs to change. At the moment, SSSD does not support changing IDs, so the SSSD database must be removed.
Please try to remove sssd cache (rm -f /var/lib/sss/db/*) I hope problem will be fixed after starting sssd with clean cache.
LS