From d9de4b26f44a344025bbfa23104b7b67935fae35 Mon Sep 17 00:00:00 2001 From: Pavel Reichl Date: Thu, 28 Jan 2016 05:03:40 -0500 Subject: IDMAP: Man change for ldap_idmap_range_size option MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Resolves: https://fedorahosted.org/sssd/ticket/2922 Reviewed-by: Nathaniel McCallum Reviewed-by: Michal Židek --- src/man/include/ldap_id_mapping.xml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'src/man/include') diff --git a/src/man/include/ldap_id_mapping.xml b/src/man/include/ldap_id_mapping.xml index a088c4e8..9252b1ca 100644 --- a/src/man/include/ldap_id_mapping.xml +++ b/src/man/include/ldap_id_mapping.xml @@ -178,7 +178,9 @@ ldap_schema = ad For example, if your most recently-added Active Directory user has objectSid=S-1-5-21-2153326666-2176343378-3404031434-1107, - ldap_idmap_range_size must be at least 1107. + ldap_idmap_range_size must be at least 1108 as + range size is equal to maximal SID minus minimal SID plus one + (e.g. 1108 = 1107 - 0 + 1). It is important to plan ahead for future expansion, as changing this -- cgit