Manage LDAP POSIX attributes

Last reviewed 2024-04-25 UTC

The following section describes the attributes that you need to set in the Attribute Editor for LDAP users and LDAP groups. You can manage POSIX attributes by using the Active Directory Users and Computers Microsoft Management Console (MMC) snap-in.

1. In the Attributes Editor, click Start.

2. Go to Windows Administrative Tools, and select Active Directory Users and Computers.

   The Active Directory Users and Computers window opens.

3. Select the domain name that you want to view, and then expand it.

4. In the Active Directory Users and Computers View menu, click Advanced Features.

5. In the left pane, double-click Users.

6. In the list of users, double-click a user to see their Attribute Editor tab.

Required attributes for LDAP users

LDAP users must have the following attributes set:

• uid
• uidNumber
• cn
• gidNumber
• objectClass

Each user must have a unique uidNumber.

Example:

• uid: Alice This is case-sensitive

• uidNumber: 139

• gidNumber: 555

• objectClass: user This is the default on most Active Directory deployments

Required attributes for LDAP groups

LDAP groups must have the following attributes set:

• cn

• gidNumber

• objectClass

Each group must have a unique gidNumber.

Example:

• cn: AliceGroup This is case-sensitive.

• gidNumber: 555

• objectClass: group This is the default on most Active Directory deployments.