View Single Post
  #8 (permalink)  
Old 29-Mar-2007, 12:58
Shannon VanWagner
Guest
 
Posts: n/a
Default

Ghys,

Yes there are differences between plain Server 2003 and Server 2003 R2, specifically that 2003 R2 has *.nix support natively and 2003 requires Services For Unix "SFU" to be installed to extend the Active Directory Schema.

At least one major difference is that SFU uses a different Active Directory Schema mapping scenario in your ldap.conf file.

Try this example ldap.conf configuration for 2003 with SFU installed:

######################################
# ldap.conf file example for use with Server 2003 (non-R2)
######################################
host 10.10.10.1
base dc=myplace,dc=com
uri ldap://dc01.myplace.com/
#cn=Users refers to the "Users" container in AD
binddn cn=LDAPQUERYUSER,cn=Users,dc=myplace,dc=com
bindpw LDAPQUERYUSERpaSsword
scope sub
bind_timelimit 15
timelimit 15
ssl no
referrals no
nss_base_passwd dc=myplace,dc=com
nss_base_shadow dc=myplace,dc=com
nss_base_group dc=myplace,dc=com
nss_map_objectclass posixAccount user
nss_map_objectclass shadowAccount user
nss_map_objectclass posixGroup group
nss_map_attribute uid sAMAccountName
nss_map_attribute gecos name
nss_map_attribute userPassword msSFU30Password
nss_map_attribute homeDirectory msSFU30HomeDirectory
nss_map_attribute uniqueMember msSFU30PosixMember
nss_map_attribute uidNumber msSFU30UidNumber
nss_map_attribute gidNumber msSFU30GidNumber
nss_map_attribute loginShell msSFU30LoginShell
nss_map_attribute cn cn
nss_initgroups_ignoreusers root,ldap



Also, see the references links above for more information
Shannon