Migrating UNIX profiles to Active Directory

If your current environment includes Samba servers that are joined to the Active Directory domain as member servers and existing Windows users access the data on those servers, you may want to migrate those existing users to authentication, privilege elevation, and audit and monitoring services to rationalize UIDs and GIDs and manage all of your network’s conflicting identities in a single, centralized ID repository.

Note:   Migrate your Samba users to Active Directory, as explained in this section, before integrating Samba and Centrify Authentication Service as explained in Running the adbindproxy.pl script.

There are two ways to migrate your UNIX profiles to Active Directory:

  • If winbind is currently configured in your /etc/nsswitch.conf file, you need to run the getent command to retrieve the user information.
  • If you do not have winbind configured in your /etc/nsswitch.conf file, then run the adbindproxy perl script to migrate the users. See the instructions below.