#3171 Same range should not be allowed for primary and secondary RID range
Closed: Fixed None Opened 11 years ago by tbabej.

ipa idrange-add/mod allows the same (or overlapping) rid-base and secondary-rid-base. This should not be allowed, since the sole purpose of secondary RID range is to provide a fallback RID range if a user and a group share the same Posix ID.

[tbabej@vm-098 ~]$ ipa idrange-add range9 --base-id=5000 --rid-base=6000 --secondary-rid-base=6000
Number of IDs in the range: 500
-----------------------
Added ID range "range9"
-----------------------
  Range name: range9
  First Posix ID of the range: 5000
  Number of IDs in the range: 500
  First RID of the corresponding RID range: 6000
  First RID of the secondary RID range: 6000
  Range type: local domain range

Changing 3.2 priority

needed for CIFS support

Rename "trusts" component to "Trusts" to achieve correct sorting.

Metadata Update from @tbabej:
- Issue assigned to tbabej
- Issue set to the milestone: Future Releases

7 years ago

Login to comment on this ticket.

Metadata