Can't add NIS to my ADS/PDC server?

Article ID: 142

Last updated: 19 Feb, 2009

Symptom:

I’m trying to add my NIS server to my ADS or PDC and it fails. In the logs it shows many sync errors such as:

Synchronize error for user +wilhit:no such user.
Synchronize error for user +colloq1:no such user.

error for group +adapt22: no such group.
error for group +nesc23: no such group.

Problem:

Users can not use two authentication methods at the same time. As ADS and PDC does not keep users UID and groups GID. It only contains names. After establishing a connection to ADS/PDC, UIDs and GIDs mappings that are created on Open-E side, UNIX based systems –POSIX based,- can be different than users names on the ADS/PDC which could lead to ACL issues.

Solution:

The system admin have to keep the UID/GID mapping, while using NIS with ADS/PDC authentication, by having all users and groups to be the same on the ADS/PDC and the NIS server. Then, sync the UID/GID from Open-E GUI (Configuration->NAS settings-> UID & GID synchronization.)