Hi,
I was using Centos before but they are now discontinue so I am trying to migrate our environment to Rocky.
My problem is - when I try to install new IPA replica server then getting following error message
Primary and secondary RID base are too close. They have to differ at least by 499900003.
[error] RuntimeError: RID bases too close.
Your system may be partly configured.
Run /usr/sbin/ipa-server-install --uninstall to clean up.
I’m not sure I understand your scenario and you didn’t provide the full command with the switches you’re using.
I would suggest either:
A) Remove anything related to RID on your ipa-replica-install command and let the installer handle it - If you are not specifying them, you may need to
B) Change your RID switches that fix the error
In either case, the primary and secondary RID bases must differ by at least 3.
A) Remove anything related to RID on your ipa-replica-install command
and let the installer handle it - If you are not specifying them, you
may need to
B) Change your RID switches that fix the error
Both A and B implies you are using --rid-base and/or --secondary-rid-base. A implies to remove them and let the installer handle it. B implies that you should be using at least a 3 ID gap between the two bases. If you are running an ipa-replica-install and are not providing those switches, you may need to.
As I said, you haven’t provided the command, nor the switches that are you using for your replica installation. Having an RID implies that you have an IPA-AD trust and thus an idrange associated with said trust. This page talks about trust integration and ID ranges.
Regardless if a replica is not going to manage or communicate with AD, it must manage each and every ID range in some capacity.