Group attributes in hierarchical zones

A group extension object is a serviceConnectionPoint object that is created in the Groups sub-container of the zone. The pseudo‑attributes for this object are stored in the keywords attribute.

Group attribute Stored in Active Directory attribute Inherited

version

displayName=$CimsZoneVersion4

or, for RFC 2307 objects, use version 5:

displayName=$CimsZoneVersion5

No

name

keywords:login:Name

For example:

keywords:login:ibmdba

Yes

gid

keywords:gid:value

For example:

keywords:gid:458

If the group is in a standard zone, the GID is stored as gid:xxx in the keywords attribute.

If the group is in an RFC 2307 zone, the GID is stored in the schema’s gid attribute.

Yes

parentLink

keywords:parentLink:MS-SID

For example:

keywords:parentLink:S-1-5-21-387451290

No

IsMembershipRequired

keywords:required:value

For example:

keywords:required:true

Yes

InheritFromParent

keywords:inherit:value

For example:

keywords:inherit:true

No