I've got a set of servers that I need to authenticate against a central Active Directory forest. The AD admins have kindly installed the UNIX AD extensions and the NIS ones as well, so I've got a lot of LDAP attributes to work from.
Authenticated binds are working, as are user logins. The one piece I'm missing is the magic sauce to make group enumerations work correctly.
Does anyone have any particular
/etc/ldap.conf or perhaps PAM magic that I could employ to make groups work correctly?
[root@hostname ~]# groups username id: cannot find name for group ID 1768498755 [root@hostname ~]#
(The ID is the default group specified via gidNumber.)