This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
aix:user_ldapmaps [2022/10/25 10:48] manu |
aix:user_ldapmaps [2022/10/25 10:57] (current) manu |
||
|---|---|---|---|
| Line 5: | Line 5: | ||
| My maps to connect to AD, I'm using LDAP RFC2107. | My maps to connect to AD, I'm using LDAP RFC2107. | ||
| - | On AD for each user and group used for AIX, please set the following parameters | + | AIX like every UNIX/Linux, works always with IDs for users as well for groups |
| + | |||
| + | On AD for each user and group used for AIX, please set the following parameters (required). For info, these parameters are simulated throught sssd on linux. | ||
| **User** | **User** | ||
| ^Parameter^Value^comment^ | ^Parameter^Value^comment^ | ||
| |uid|user01|lowercase| | |uid|user01|lowercase| | ||
| - | |unixHomeDirectory|/home/user01@mydomain.lu|lowercase| | + | |unixHomeDirectory|/home/user01|lowercase| |
| |loginShell|/usr/bin/bash|shell: keep bash everywhere| | |loginShell|/usr/bin/bash|shell: keep bash everywhere| | ||
| |gidNumber|1200123456|primary group ID (always aix-group)| | |gidNumber|1200123456|primary group ID (always aix-group)| | ||
| |uidNumber|1200789012|userID| | |uidNumber|1200789012|userID| | ||
| - | **Group** | + | **For info**: homedir can also have a different look : /home/user01@mydomain.lu |
| + | |||
| + | **Group** ALL groups need a gidNumber | ||
| ^Parameter^Value^ | ^Parameter^Value^ | ||
| |name|aix-group| | |name|aix-group| | ||
| Line 37: | Line 41: | ||
| pgid SEC_INT gidnumber s na yes | pgid SEC_INT gidnumber s na yes | ||
| </cli> | </cli> | ||
| + | **time_last_login** is commented because it tries to update the field into AD, which is not allowed | ||
| <cli prompt='#'> | <cli prompt='#'> | ||