search for: installing_the_nis_extensions

Hi, >How are you trying to create the Unix (RFC2307) attributes ? I am following the article: https://wiki.samba.org/index.php/Maintaining_Unix_Attributes_in_AD_using_ADUC Open ADUC. Right-click to a user account and choose properties. Navigate to the "UNIX Attributes" tab. >Also, what do you mean by 'it doesn't bother any NIS server' ? Sorry, Google translated it

...uring provision). No surprise, it worked. Then I removed RFC2307 using ldapmodify to delete 55 entries added by ypServ30.ldif which is the file used to add RFC2307 in Samba when it was provisioned without --with-rfc2307 (as described there: https://wiki.samba.org/index.php/Setting_up_RFC2307_in_AD#Installing_the_NIS_Extensions ). Here again, after "net ads leave" then a join into that domain, winbind was able to retrieve AD user using RFC2307 LDAP attributes, as long as I kept into into DC's smb.conf the following line as mentioned in previous mail by Rowland the 27th of July: idmap_ldb:use rfc2307 = yes A...

...butes are in the AD schema by default, so they are available for use. You have a few options: Check if IDMU is installed and install it if not. Install the ypServ30.ldif on the Samba DC (/usr/share/samba/setup/ypServ30.ldif), see here: https://wiki.samba.org/index.php/Setting_up_RFC2307_in_AD#Installing_the_NIS_Extensions Write your own script using ldbmodify or ldapmodify to add the uidNumber & gidNumber attributes. You should be aware that even if you do any of the above, your users will still get Domain Users as their primary group on the DC. To get your AD users to show on your Samba AD DC, you need to...

...e > available for use. > > You have a few options: > > Check if IDMU is installed and install it if not. > > Install the ypServ30.ldif on the Samba DC > (/usr/share/samba/setup/ypServ30.ldif), see here: > > > https://wiki.samba.org/index.php/Setting_up_RFC2307_in_AD#Installing_the_NIS_Extensions > > Write your own script using ldbmodify or ldapmodify to add the uidNumber > & gidNumber attributes. > > You should be aware that even if you do any of the above, your users > will still get Domain Users as their primary group on the DC. > > To get your AD users to sho...