[olug] local groups and Active Directory

[Phil Brutsche]

The LDAP NSS module will only work if you're using Microsoft's Services
for UNIX on your domain controller(s) to provide the RFC2307 schema that
the LDAP NSS module expects.

You need to set it up to use the winbind NSS module like so:

passwd:         compat winbind
group:          compat winbind
shadow:         compat

hosts:          files dns
networks:       files

protocols:      db files
services:       db files
ethers:         db files
rpc:            db files

netgroup:       nis

Your AD users and groups will then be available on your Linux machine.
You can verify their existence with "getent group" and "getent passwd".

You also need to have winbindd running.

Adam Lassek wrote:
> OK, I see how it works. This is what Daniel was getting at, I just
> wasn't following. Thanks for your help.

-- 

Phil Brutsche
phil at brutsche.us