freeipa

#9781 Give warning when adding user with UID out of any ID range
Closed: fixed by sumenon. Opened by dhanina.

Closed: fixed
Reopen Issue

Issue

It's required for user accounts to have ipantsecurityidentifier generated, however, this doesn't happen if we specify uid, that's outside of all local ID ranges. We should at least warn the users.

Steps to Reproduce

  1. ipa user-add test --uid=2000

Actual behavior

Creates user without ipantsecurityidentifier, such user can never successfully log in, as this attribute is required.

Expected behavior

We should notify users about missing ipantsecurityidentifier and how to prevent that.

Metadata Update from @dhanina:
- Custom field rhbz adjusted to https://issues.redhat.com/browse/RHEL-25007

Metadata Update from @dhanina:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/7803

master:

  • b36c163fe8c225e12737d0e25092bb1a7fc9fd5c Warn when UID is out of local ID ranges

Metadata Update from @frenaud:
- Custom field rhbz adjusted to https://issues.redhat.com/browse/RHEL-25007, https://issues.redhat.com/browse/RHEL-95010 (was: https://issues.redhat.com/browse/RHEL-25007)

ipa-4-12:

  • 0c98af9f70c62da3d3dea02b91a9330a5f9f669a Warn when UID is out of local ID ranges

Metadata Update from @sumenon:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
None
https://github.com/freeipa/freeipa/pull/7803
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.