Hi,
this is what I get on our filer:
GEDASAN::> vserver services ldap client show -vserver Corporate -fields schema vserver client-config | schema |
--------- ----------------------------- ------------------------
Corporate LDAP_vfiler0_Corporate_conf_0 LDAP_vfiler0_Corporate_5
GEDASAN::> vserver services ldap client schema show -instance -vserver Corporate -schema AD-IDMU
Vserver: Corporate
Schema Template: AD-IDMU
Comment: Schema based on Active Directory Identity Management for UNIX (read-only)
RFC 2307 posixAccount Object Class: User
RFC 2307 posixGroup Object Class: Group
RFC 2307 nisNetgroup Object Class: nisNetgroup
RFC 2307 uid Attribute: uid
RFC 2307 uidNumber Attribute: uidNumber
RFC 2307 gidNumber Attribute: gidNumber
RFC 2307 cn (for Groups) Attribute: cn
RFC 2307 cn (for Netgroups) Attribute: name
RFC 2307 userPassword Attribute: unixUserPassword
RFC 2307 gecos Attribute: name
RFC 2307 homeDirectory Attribute: unixHomeDirectory
RFC 2307 loginShell Attribute: loginShell
RFC 2307 memberUid Attribute: memberUid
RFC 2307 memberNisNetgroup Attribute: memberNisNetgroup
RFC 2307 nisNetgroupTriple Attribute: nisNetgroupTriple
ONTAP Name Mapping windowsAccount Attribute: windowsAccount
Vserver Owns Schema: false
And yes, memberUid is not set by default on Windows 2008 R2 Unix Identity Management. So how do you fix it? You write a script that populates the LDAP Attribute memberUid?