LDAP-UX Client Services B.05.00 with Microsoft Windows Active Directory Server Administrator's Guide (obsolete beyond B.05.00)

ManualsBrandsHP ManualsSoftwareHP-UX LDAP-UX Integration Software

http://msdn2.microsoft.com/en-us/library/ms952382.aspx

An Example

The following shows an example of a dynamic group entry (LDAP query group) created using

Authorization Manager:

dn: CN=group1,CN=AzGroupObjectContainer-dyngroup,CN=dyngroup,

DC=hp,DC=com

objectClass: top

objectClass: group

cn: group1

description: my dynamic group

distinguishedName: CN=group1,CN=AzGroupObjectContainer-dyngroup,

CN=dyngroup,DC=hp,DC=com

instanceType: 4

whenCreated: 20060313181428.0Z

whenChanged: 20060313182629.0Z

uSNCreated: 16588

uSNChanged: 16597

name: group1

objectGUID:: 2qO9YxkqAUuwCmkMJ371DA==

objectSid:: AQUAAAAAAAUVAAAAuEKpalCWUfgTN3lpVwQAAA==

sAMAccountName: $N21000-OA67EGECFDSP

sAMAccountType: 1073741825

groupType: 32

objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=hp,DC=com

msDS-AzLDAPQuery: (cn=p*)

5.2.1.2 Step 2: Adding POSIX attributes to a dynamic group

To create an HP-UX POSIX dynamic group, you must use ADSI Edit to add one of the following

attributes with POSIX group ID information to the dynamic group entry created in Step 1: Creating

a Dynamic Group.

• GidNumber attribute for Windows 2003 R2/2008 ADS

An Example for Window 2003 R2/2008 ADS

For Windows 2003 R2 or 2008, the following shows an example of an HP-UX POSIX dynamic

group entry with GidNumber information added to the above dynamic group entry:

dn: CN=group1,CN=AzGroupObjectContainer-dyngroup,CN=dyngroup,DC=hp,DC=com