Re: Static Mappings

>On OS X for example, it's possible to map an LDAP attribute to a static
>value rather than to a up in the directory -- I'd like to do that with
>gidNumber and uidNumber so that the default AD user entries are sufficient.
>All authorization on the system is based on user/group name, so there's no
>need to have real mappings, just sufficiently valid mappings to make NSS
>work for username->group membership lookups and the like.
>
>So if there's a way to create static mappings in nss_ldap, or some other way
>to trick nss_ldap into thinking that the default AD users are sufficient for
>use in Unix I'd be very appreciative of a link or other instructions.

You can set a default value, eg:

nss_default_attribute_value uidNumber -2
nss_default_attribute_value gidNumber -2

-- Luke

--