Using Identity Management for UNIX effectively - Part II

In this post let’s take a looks around managing UNIX related attributes. Once we install Server for NIS and related components on a domain controller the User, Group and Computer objects gets a separate property page – UNIX Attributes.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Populating UNIX related attributes is really simple if we use this snap-in. in case of bulk users a script may be a better choice. The attributes needed for Users and Groups are here:

List of attributes for a user:

uid – generally the sAMAccountName

uidNumber – an unique number for the user in a domain

gidNumber – number same as of the gidNumber of the group to which this user belongs

msSFU30Name - generally the sAMAccountName

unixHomeDirectory – home directory for UNIX environment

loginShell – default shell for user

List of attributes for a group:

gidNumber – an unique number for the group in a domain

It is possible to manage these attributes from a Client box; we need to register nisprop.dll to get the appropriate UNIX attribute tab on Users, Group etc properties page.

There is a tool available for managing UNIX attributes for Windows 2003 R2. IDMU.exe available from https://www.microsoft.com/downloads/details.aspx?familyid=9BFB44F5-232A-4FB5-BC14-45BFD81B7AC1&displaylang=en works perfectly.