Page History

...

The fix for that error is the following command:

1. Check if your DNA ranges exists 

   Code Block
   ipa-replica-manage dnarange-show

   (This command should return ldap_server: No on-deck range set)
2. Identify min and max range of IDs (min=First Posix ID of the range) (max=First Posix ID of the range of IDs + Number of IDs in the range)

   Code Block
   ipa idrange-find

   Set the lower boundary to exclude every existing account (as of ipa user

   -find

   | grep 'UID')
3. Assign the DNS range using ${min}-${max} identified in the previous steps 

   Code Block
   ipa-replica-manage dnarange-set $ldap_server ${min}-${max}

4. Check the range that is used assigned now

ipa-replica-manage dnarange-show

...