Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have been strugling to get the expected result from getent. Ive setup a Solaris 9 server to authenticate agains eDirectory Ldap Server.Im able to Authenticate fine. only thing is when i run the id Command it returns with no ldapgroups.

I have found that getent group only returns the Group name and GID number but not the members in them...

please help?

share|improve this question

It is probably looking for memberUid not member, and you do not have memberUid populated.

In eDirectory group membership is denoted with a full DN. Usually Unix'y LDAP implementations want just the CN= or uid= of the users who are members, thus the memberUid attribute.

Be aware this is defined as case exact string in eDirectory by default as well, so case of the user matters, even though CN and uid are both case ignore string attributes, which is a bit of a strange pain at times.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.