User attributes in classic SFU-compliant zones

In classic SFU zones, UNIX-specific user attributes are stored as part of the Active Directory user object.

User attribute Stored in Active Directory attribute

UnixName

MSSFU30Name:userlogin

For example:

MSSFU30Name:cain

Uid

MSSFU30UidNumber:value

For example:

MSSFU30UidNumber:458

Gid

MSSFU30GidNumber:value

For example:

MSSFU30GidNumber:458

Home

MSSFU30HomeDirectory:value

For example:

MSSFU30HomeDirectory:/home/shea

Shell

MSSFU30Shell:value

For example:

MSSFU30Shell:/bin/bash

NisDomain

MSSFU30NisDomain:value

This attribute must be defined. Centrify uses this setting to determine if the user is a member of the zone. When you create SFU-compliant zones, you must specify the NIS domain name that should be included. For example, you can configure zone_bejing to include all users and groups whose NIS domain attribute is set to nisbejing.

For example:

MSSFU30NisDomain:nisbejing.local

UnixEnabled

Not supported.