[Freeipa-users] UID splitting policy and running out.

Simo Sorce simo at redhat.com
Tue Oct 2 21:53:57 UTC 2012


On Tue, 2012-10-02 at 21:41 +0000, Steven Jones wrote:
> Hi,
> 
> I just found that I had runout of UIDS when doing a winsync agreement.
> 
> >From my understanding when you add a replica it takes 1/2 of the master's UIDs block...so a 2nd replica takes 1/2 of that again?
> 
> In my case I rebuilt the replica's several times and the Master ended up with only 2500 UIDs left...
> 
> When I did a winsync then it wasnt happy.
> 
> I'd suggest that as part of the winsync setup a ldapsearch is done to make sure there are plenty left and allocate more  if need be ....unless its a virgin setup....but a large site with say 2 replicas would leave 25000 UIDs on the master?  not unusual for AD's to have 25000+ users I'd suggest. (we have about 21000).
> 
> or did I do something wrong?

The DNA plugin should have reclaimed IDs when it was about to run off,
can you please open a bug if that did not happen ?

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York




More information about the Freeipa-users mailing list