LDAP-UX Client Services B.04.15 with Microsoft Windows Active Directory Server Administrator's Guide (edition 8)

The specific number of domain controllers necessary in your network depends on the network
size and configuration. A minimum of two Active Directory domain controllers are
recommended for each domain. For more information, refer to the Active Directory
documentation, or to http://www.microsoft.com/Windows2000 and
http://windowsupdate.microsoft.com.
• Where will you get your name service data when migrating the data to the directory?
You can get the data from:
— /etc/passwd and /etc/group
— The same source files used to create your NIS maps, if using NIS
— The NIS maps
For information about importing information into the directory, refer to “Importing Name
Service Data into Your Directory” (page 35). For information on migration scripts, refer to
“Command, Tool, Schema Extension Utility, and Migration Script Reference” (page 163).
To add an individual user entry or modify an existing user entry in your directory, use the
ldapmodify command or other directory administration tools, such as the Active Directory
Users and Computers interface tool.
NOTE: Keep a small subset of users in /etc/passwd, particularly the root login. This
allows administrative users to log in during installation and testing. Also, if the directory
is unavailable you can still log in to the system.
• Where will name service data be located in your directory?
LDAP-UX Client Services, by default, expect user and group data to use the object classes
and attributes specified by RFC 2307. The migration scripts for Active Directory, by default,
populate the existing Users container. “Example Directory Structure for a Single Domain”
(page 26) shows a base DN of DC=cup, DC=hp, DC=com.
If you prefer to merge your name service data into an existing directory structure, you can
map the standard RFC 2307 attributes to alternate attributes. Refer to “LDAP-UX Client
Services Object Classes” (page 159).
• How will user and group data be migrated into your directory?
The migration scripts provided with LDAP-UX Client Services for Active Directory migrate
all user and group data to the "Users" container.
If you merge your data into an existing directory, for example, to share user names and
passwords with other applications, the migration scripts can create LDIF files of your user
data, but you must write your own scripts or use other tools to merge the data into your
directory. PosixAccount attributes can be added to your users already in the directory to
leverage your existing directory data.
Planning Your Installation 25