Getting AD Lookup to work without UNIX Attributes tab

re: Getting AD Lookup to work without UNIX Attributes tab

ashisa — Thu, 16 Aug 2012 21:11:07 GMT

@Joe - Maybe it's taking it from the local files and still using the passwords in AD for the logon process. To populate the information in AD, you can take the passwd and group files to a Windows box and give the following command a try -

FOR /F "delims=: eol=; tokens=1,2,3,4,5*" %i IN (passwd.txt) DO @cscript <script-name-from-above> %i %k %l

For groups, the following should do -

FOR /F "delims=: eol=; tokens=1,2,3,4*" %i IN (group.txt) DO @echo %i %k

Hope this helps.

re: Getting AD Lookup to work without UNIX Attributes tab

Joe Mac — Thu, 16 Aug 2012 03:49:25 GMT

A previous sys admin setup our Linux boxes so that users can log into them via AD. And within Linux, these users all have proper ID numbers. However, the uidNumber is not set for any of the users in AD.

Where does Linux get the ID numers from if AD doesn't have them?

At this point it looks like I'll have to look up every user's ID number in Linux, and then add it to the "uidNumber" field on the AD server. Is there a way to do this automatically, or at least get a full listing??

Thank you!

-joe

re: Getting AD Lookup to work without UNIX Attributes tab

Simon Allison — Mon, 16 Jul 2012 11:09:51 GMT

Please can you add this useful information to the step by step NFS for Windows Server 2008 R2 Documentation - its the most crucial part to get everything working! thanks

re: Getting AD Lookup to work without UNIX Attributes tab

ashisa — Thu, 24 Jun 2010 15:07:05 GMT

@Iain - It should just work when uidNumber and gidNumber attributes are populated with the user's UNIX uid and gid numbers. Drop me an email with more details.

- Ashish

re: Getting AD Lookup to work without UNIX Attributes tab

Iain — Thu, 24 Jun 2010 14:59:50 GMT

One thing I don't quite get. SHould AD Lookup "just work" assuming you have 2003 R2 or higher installed? Or do you need the Server for NIS component installed on all the DCs? I know I have the R2 schema, as I can see and edit the uidnumber and gid properties in adsiedit orvia other ldap tools. However, I can't seem to make AD lookup work. Just curious if I missed a big, obvious step.