Centrify password synchronization service

If you are using the Centrify Password Filter synchronization service, the zone_nis_servers group requires the following permissions:

If this attribute is used These permissions are required 
altSecurityIndentities
  • Read altSecurityIndentities
 
msSFU30Password
  • Read msSFU30Password
 
unixUserPassword
  • Read unixUserPassword
  • All Extended Rights