freeipa

#9757 Support full 32-bit ID range space
Closed: fixed by sumenon. Opened by abbra.

Closed: fixed
Reopen Issue

Allow IPA deployment with full 32-bit ID range space. This is currently not possible due to subordinate ID range always allocated in 2^31..2^32-1 space.

  • Add configuration option to disable subordinate ID integration
  • Allow removing ID range for subordinate IDs
  • Allow specifying UID/GID values up to MAX_UINT32 (2^32-1)
  • Allow adding ID range to handle both UID/GID values and RID bases up to MAX_UINT32(2^32-1)

PR: https://github.com/freeipa/freeipa/pull/7713

Metadata Update from @frenaud:
- Custom field rhbz adjusted to https://issues.redhat.com/browse/RHEL-67686

master:

  • cc763d78cc9d4f3fb858b9c5771cf9f6b5317990 config-mod: allow disabling subordinate ID integration
  • cdafe1d3e4bc297f93d94fdcf3a3b3bd4ef4d2c8 update_dna_shared_config: do not fail when config is not found
  • 99decb113145c39206a71676f8f589ce675af79d baseuser: allow uidNumber and gidNumber of 32-bit range
  • 5a398d270f5987a9c1ac54d8d7107bae724f6757 ipatests: add a test to use full 32-bit ID range space

ipa-4-12:

  • f906e3625491e9b6fc67fdd5ac6b429531658be1 config-mod: allow disabling subordinate ID integration
  • b8b91dfe71d7d049f5e55a8195cb37f87837bbce update_dna_shared_config: do not fail when config is not found
  • 65cb358c01568e9a11899dbfe21eaeb916af3cdf baseuser: allow uidNumber and gidNumber of 32-bit range
  • 015d26bab4296dc18e97dd10054a3f668282ef88 ipatests: add a test to use full 32-bit ID range space

Metadata Update from @sumenon:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.