# cat /etc/security/ldap sfur2user.map

LDAPA will only use the user map file, but the group map file also needs to be specified in ldap.cfg otherwise secldapclntd won’t start.

Look at the user map file and note the “username” entry. For the sfur2user.map file, the username entry may look like this:

username        SEC_CHAR        uid                     s       na      yes

This specifies that AIX will look for a “uid” attribute on LDAP server to map to the AIX username. From Step 3 and 4 above, this will need to change from “uid” to “sAMAccountName”.

Edit the custom user map file – which is myuser.map in this example – and change the username entry to this:

username        SEC_CHAR        sAMAccountName                     s       na      yes