We have the following setup:
- Windows 2012 Server as PDC
- some Linux machines, users should be authenticated against AD
- Debian Wheezy
- winbindd 3.6.6
Now I have to chose the right way to handle the Windows <-> Unix ID mapping. Currently
idmap_rid is my favorite since it looks like not much administrative effort is needed.
However, if there was an easy way to store the necessary information in AD and use
idamp_ad it would also sound like a nice solution. But I can't really find a guide on how to achieve this in Server 2012.
How do I configure the mapping on the Windows side?