LDAP-UX Client Services B.04.15 with Microsoft Windows Active Directory Server Administrator's Guide (edition 8)

Removing the GCS from the Search Scope
To remove the GCS from the search scope, either run setup to re-configure, or manually edit
/etc/opt/ldapux/ldapux_client.conf to remove the gc section, its corresponding profiles
(/etc/opt/ldapux/domain_profiles/ldapux_profile.bin.gc and
ldapux_profile.ldif.gc), and all entries to the end of the file. Restart the client daemon
for the change to take effect.
Adding POSIX Attributes to the Global Catalog
If you select GCS to support LDAP-UX integration with ADS multiple domains, you should add
POSIX attributes into the global catalog. The needed attributes are those used by getXbyY()
APIs to return data. For LDAP-UX B.03.00 or later, only passwd andgroup are supported in
multiple domains. Therefore, the following POSIX attributes must be added into the global
catalog:
• For SFU version 2.0:
msSFUName - used by getpwnam() and getgrnam()
uidNumber - used by getpwuid()
gidNumber - used by getgrgid()
• For SFU version 3.0 or 3.5:
msSFU30Name - used by getpwnam() and getgrnam()
msSFU30uidNumber - used by getpwuid()
msSFU30gidNumber - used by getgrgid()
• For Windows Server 2003 R2's RFC2307 :
uid - used by getpwnam() and getgrnam()
uidNumber - used by getpwuid()
gidNumber- used by getgrgid()
To add these attributes to the global catalog:
1. On your Windows 2000 GCS, click Start, then Run. In the open dialog box, type mmc, then
click OK.
2. Click the Microsoft Management Console menu, select Add/Remove Snap-in.
3. Click Add under the Standalone tab to get to the Add Standalone Snap-in dialog box.
4. In the Add Standalone Snap-In dialog box, select Active Directory Schema, then click Add
and then Close.
5. Active Directory Schema appears in the Add/Remove Snap-In dialog box. Click OK.
6. In the Microsoft Management Console, click Active Directory Schema and Double-click
Attribute, under Name on the right-hand side of the box. All attributes will be shown..
7. Click the POSIX attribute to add into the global catalog (for example; msSFUname for SFU
2.0, uidNumber, gidNumber), and then select Properties from the Action menu.
8. In the Attribute Properties dialog box, select Replicate this attribute to the Global Catalog
and Index this attribute in the Active Directory, click Apply, and then OK.
9. Repeat steps 6 and 7 until all the required POSIX attributes are added into the global catalog.
Limitations of Multiple Domains in Version B.03.00 or later
• LDAP-UX Client Services only supports passwd and group in ADS multiple domains.
• LDAP-UX Client Services using Windows 2000 or 2003 Active Directory Server does not
support netgroup service data.
62 Active Directory Multiple Domains