Simo, you are right. I had the known problem that the nisprop.dll was missing - so the unix attributes didn't work, even if SUA was installed. Now it works :). Thx, pat
----- Original Message ----- From: "Simo Sorce" ssorce@redhat.com To: sssd-devel@lists.fedorahosted.org Sent: Monday, January 31, 2011 7:42:28 PM Subject: Re: [SSSD] Config problem or bug(?) with sssd and Windows AD 2008
On Mon, 31 Jan 2011 13:44:58 +0100 (CET) Patrick Grieshaber pgr@patrickgrieshaber.net wrote:
So far I have one important problem left. It is regarding the ldap_user_uid_number and ldap_user_uid_number.
For auditing reasons, the uid/gid must be easy to recognize. So for the uid mapping I chose extensionAttributeX to read a value (number) that refers to a user.
Why don't you simply update your directory to support the posix schema (it is a Microsoft schema extension fully supported by MS) and just set the uidnumber and gidnumber attributes ?
That is the correct way to handle posix attributes after all and will give you also access to loginshell and homedirectory attributes if you want to use them.
Simo.