I've solved one of my problems:
If I use Ad-Groups with the same GIDs of the local AIX groups, the LDAP users have the local group permissions on the AIX system.
But you cannot create Groups with the same GID on AD. So all users who are member in such a group would have access to all aixsystem...
I've found a solution.
The problem is the OU (I don't know why) .
If I set the
userbasedn to DC=local??(&(objectclass=user)(company=IT))
there are positive matches and it works fine.
Hello,
I have configurated an user authentication against Active Directory on AIX.
In the ldap.cfg file I want to use a filter to select special users. I've set the following entry:
userbasedn: DC=local,OU=Users??(&(objectclass=user)(company=IT))
But the ldap Client cannot detect any user...
Hello,
I've configured an user authentication against Active Directory (Windows Server 2008 R2) on AIX V6 with LDAP. It works fine.
And here's my question:
How can I control ldap user permissions on the local AIX machine?
E.g. an AD user should be able to write all files of local "sys" group...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.