This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
aix:user_ldapmaps [2022/10/25 10:48] manu |
aix:user_ldapmaps [2022/10/25 10:57] (current) manu |
||
---|---|---|---|
Line 5: | Line 5: | ||
My maps to connect to AD, I'm using LDAP RFC2107. | My maps to connect to AD, I'm using LDAP RFC2107. | ||
- | On AD for each user and group used for AIX, please set the following parameters | + | AIX like every UNIX/Linux, works always with IDs for users as well for groups |
+ | |||
+ | On AD for each user and group used for AIX, please set the following parameters (required). For info, these parameters are simulated throught sssd on linux. | ||
**User** | **User** | ||
^Parameter^Value^comment^ | ^Parameter^Value^comment^ | ||
|uid|user01|lowercase| | |uid|user01|lowercase| | ||
- | |unixHomeDirectory|/home/user01@mydomain.lu|lowercase| | + | |unixHomeDirectory|/home/user01|lowercase| |
|loginShell|/usr/bin/bash|shell: keep bash everywhere| | |loginShell|/usr/bin/bash|shell: keep bash everywhere| | ||
|gidNumber|1200123456|primary group ID (always aix-group)| | |gidNumber|1200123456|primary group ID (always aix-group)| | ||
|uidNumber|1200789012|userID| | |uidNumber|1200789012|userID| | ||
- | **Group** | + | **For info**: homedir can also have a different look : /home/user01@mydomain.lu |
+ | |||
+ | **Group** ALL groups need a gidNumber | ||
^Parameter^Value^ | ^Parameter^Value^ | ||
|name|aix-group| | |name|aix-group| | ||
Line 37: | Line 41: | ||
pgid SEC_INT gidnumber s na yes | pgid SEC_INT gidnumber s na yes | ||
</cli> | </cli> | ||
+ | **time_last_login** is commented because it tries to update the field into AD, which is not allowed | ||
<cli prompt='#'> | <cli prompt='#'> |