From 33a029f9d2b55887fef08676234bebc4b6b5f7e4 Mon Sep 17 00:00:00 2001 From: Pavel Reichl Date: Thu, 28 Jan 2016 05:03:40 -0500 Subject: [PATCH 59/86] IDMAP: Man change for ldap_idmap_range_size option MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Resolves: https://fedorahosted.org/sssd/ticket/2922 Reviewed-by: Nathaniel McCallum Reviewed-by: Michal Židek (cherry picked from commit d9de4b26f44a344025bbfa23104b7b67935fae35) (cherry picked from commit c2fa17edf4b9d385302ddd24ce599a1cef7250a6) --- src/man/include/ldap_id_mapping.xml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/src/man/include/ldap_id_mapping.xml b/src/man/include/ldap_id_mapping.xml index a088c4e81d81c5670edea8ae8081abe80927446a..9252b1caa56b086b640ab0b2a79069616cef6443 100644 --- a/src/man/include/ldap_id_mapping.xml +++ b/src/man/include/ldap_id_mapping.xml @@ -178,7 +178,9 @@ ldap_schema = ad For example, if your most recently-added Active Directory user has objectSid=S-1-5-21-2153326666-2176343378-3404031434-1107, - ldap_idmap_range_size must be at least 1107. + ldap_idmap_range_size must be at least 1108 as + range size is equal to maximal SID minus minimal SID plus one + (e.g. 1108 = 1107 - 0 + 1). It is important to plan ahead for future expansion, as changing this -- 2.5.0