I need to have Solaris and AIX systems obtain authentication and name services to AD. I have had some success with Solaris using OpenLDAP as a proxy for user authentication. I have also successfully configured AIX to use AD kerberos authentication and AD LDAP naming services. However, for both platforms, I have two serious issues I need help on:
- AD users/groups may be upper or lower-case, or any combination thereof, but for consistent end-user experience and utilities working as expected in UNIX, they should be lower-case. Renaming IDs en-masse in AD is hard to sell. Linux sssd can do the lower-casing, but AIX/Solaris cannot.
- AIX and Solaris expect a rfc2307 'memberUid' attribute (eg memberUid=user1) for group members, while AD uses rfc2307bis 'member' attribute (eg member=cn=user1,dc=foo,dc=com). Is there a way with OpenLDAP, or otherwise, to rewrite memberUid from member for Solaris/AIX clients? slapo-rwm can rewrite DNs, but transforming like this, doesn't seem to be there.