38.8. Removing an ID range after removing a trust to AD

Procedure

1. Display all the ID ranges that are currently in use:

   [root@server ~]# ipa idrange-find

2. Identify the name of the ID range associated with the trust you have removed. The first part of the name of the ID range is the name of the trust, for example AD.EXAMPLE.COM_id_range.

3. Remove the range:

   [root@server ~]# ipa idrange-del AD.EXAMPLE.COM_id_range

4. Restart the SSSD service to remove references to the ID range you have removed.

   [root@server ~]# systemctl restart sssd