mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2026-10-25 14:40:16 -05:00
When full 32-bit ID range usage is required, subordinate ID support have to be disabled. However, even if ID range for subordinate IDs were to be removed, it will be restored during the next data upgrade. Change upgrade code to only apply subID range creation when subID support is enabled. Do not allow allocating subIDs if their use is disabled. Allow full 32-bit uidNumber/gidNumber values in JSON payload. Fixes: https://pagure.io/freeipa/issue/9757 Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com> Reviewed-By: Rob Crittenden <rcritten@redhat.com> Reviewed-By: Florence Blanc-Renaud <flo@redhat.com>