[Freeipa-users] ipa user-add range error

[Simo Sorce]

On Wed, 2012-05-30 at 14:33 -0400, Ben Ho wrote:
> Hello,
> 
>   I am trying to add a user to IPA and have been getting into some
> issues.  Basically, I run this command:
>   ipa user-add username --email=example at example.com
> 
> 
>   I put in the first and last name (works fine), however, I then get
> this error message displayed:
>   ipa: ERROR: Operations error: Allocation of a new value for range
> cn=posix ids,cn=distributed numeric assignment
> plugin,cn=plugins,cn=config failed! Unable to proceed.
> 
> 
> 
> 
> Looking into my error logs, I see this:
> [30/May/2012:13:27:52 -0400] dna-plugin - dna_get_next_value: no more
> values available!!
> [30/May/2012:13:52:07 -0400] dna-plugin - dna_get_next_value: no more
> values available!!
> 
> 
> 
> 
> This is also my LDAP structure and settings:
> cn=Posix IDs,cn=Distributed Numeric Assignment
> Plugin,cn=plugins,cn=config
> 
> dnafilter: (|(objectclass=posixAccount)(objectClass=posixGroup))
> dnamagicregen: 999
> dnamaxvalue: 1100
> dnanextvalue: 1101
> dnascope: dc=ecg,dc=mit,dc=edu
> dnasharedcfgdn: cn=posix-ids,cn=dna,cn=ipa,cn=etc,dc=ecg,dc=mit,dc=edu
> dnathreshold: 500
> dnatype: gidNumber
> dnatype: uidNumber
> 
> 
> 
Did you manually set a very small range at install time ? 
> 
> 
> 
> Do I need to increase the dnamaxvalue in order to add in a user?  Or
> is there another solution to this?


You will need to add a new range.

See 5.4.2. Adding New Ranges here:
http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html-single/Identity_Management_Guide/index.html
> 
> Thanks - any help would be appreciated!
> 


-- 
Simo Sorce * Red Hat, Inc * New York