I have some Unix folks that want to start using AD for Authentication and SSSD. They were previously using a NIS server and want to migrate that information over to AD. The NIS server with AD is deprecated and we are unlikely to install this for the migrations due to that. I was told by the UNIX admin that all they want is the available NIS attributes to be modified on the objects in AD and we don’t need to install the NIS server for AD.
However, we can see that the schema contains the NIS* objectclass when we installed the support for Unix in our AD. I still cannot see those attributes for NIS* on any objecting in AD. If I were to look at the User object class, I can add NISMap and NisNetgroup as possible Superior object classes. But, I am not sure if that is the correct approach to make these attributes available for user objects as not all users will require the NIS mapping attributes. I don’t want to affect an entire class for one department. Could someone offer me advise on how to expose the NISMap and NISNetGroup attributes for AD objects? I have never really worked with NIS before.
Thanks, Brian Britt, CISSP, MCSE, MCSA, Comptia Security+ CE