Managing SMB File Sharing and Windows Interoperability in Oracle^® Solaris 11.3

Managing Directory-Based Identity Mapping by Using Identity Management for UNIX

This section describes how to enable Identity Management for UNIX (IDMU) to manage directory-based identity mapping for the SMB server in a Windows environment. IDMU is an optional feature of Active Directory.

How to Enable Identity Management for UNIX Support

Before You Begin

Before you can use IDMU support, you must first install the IDMU software on your Active Directory domain controller and use the UNIX Attributes tab in the Active Directory Users and Computers tool to specify UIDs and GIDs for your users.

1. Become an administrator.

   For more information, see Using Your Assigned Administrative Rights in Securing Users and Processes in Oracle Solaris 11.3.

2. Enable IDMU support.

   # svccfg -s svc:/system/idmap setprop \
   config/directory_based_mapping = astring: idmu

3. Refresh the identity mapping service.

   # svcadm refresh svc:/system/idmap