Group attributes in classic SFU 4.0 zones

In classic SFU-compliant zones, UNIX-specific attributes are stored as part of the Active Directory group object. With Microsoft Services for UNIX, version 4.0, however, the R2 schema attributes are used.

Group attribute Stored in Active Directory attribute

UnixName

cn:GroupName

For example:

cn:performx

Gid

gidNumber:value

For example:

gidNumber:458

NisDomain

MSSFU30NisDomain:value

This attribute must be defined. Centrify uses this setting to determine if the group is a member of the zone.

When you create SFU-compliant zones, you must specify the NIS domain name that should be included. For example, you can configure zone_bejing to include all users and groups whose NIS domain attribute is set to nisbejing.

For example:

MSSFU30NisDomain:nisbejing.local

UnixEnabled

Not supported.