Active Directory : Add UNIX attributes to Accounts2024/11/29

	Add UNIX attributes to User Accounts. User Accounts that have UNIX attributes can authenticate to UNIX/Linux Hosts that have LDAP Client role.
[1]	Run PowerShell with admin privilege and configure like follows.

Windows PowerShell
Copyright (C) Microsoft Corporation. All rights reserved.

# add an user [ADUser02] with UNIX attributes
# specify minimum requirement attributes with [-OtherAttributes] option
PS C:\Users\Administrator> New-ADUser ADUser02 `
-Surname ADUser02 `
-GivenName ADUser02 `
-DisplayName "AD User02" `
-EmailAddress "ADUser02@srv.world" `
-AccountPassword (ConvertTo-SecureString -AsPlainText "P@ssw0rd02" -Force) `
-ChangePasswordAtLogon $true `
-Enabled $true `
-OtherAttributes @{uidNumber="5001"; gidNumber="100"; loginShell="/bin/bash"; unixHomeDirectory="/home/ADUser02"} 

# verify
PS C:\Users\Administrator> Get-ADUser -Identity ADUser02 -Properties * | Out-String -Stream | Select-String "uidNumber","gidNumber","loginShell","unixHomeDirectory" 

gidNumber                            : 100
loginShell                           : /bin/bash
uidNumber                            : 5001
unixHomeDirectory                    : /home/ADUser02


# add UNIX attributes to an existing user [ADUser01]
PS C:\Users\Administrator> Get-ADUser -Identity ADUser01 

DistinguishedName : CN=ADUser01,CN=Users,DC=srv,DC=world
Enabled           : True
GivenName         : ADUser01
Name              : ADUser01
ObjectClass       : user
ObjectGUID        : ca7d1690-8b45-48e4-bb24-deb71260c638
SamAccountName    : ADUser01
SID               : S-1-5-21-2649012655-406810028-4197379243-1106
Surname           : ADUser01
UserPrincipalName :

# specify minimum requirement attributes with [-Add] option
PS C:\Users\Administrator> Set-ADUser -identity "CN=ADUser01,CN=Users,DC=srv,DC=world" `
-Add @{uidNumber="5000"; gidNumber="100"; loginShell="/bin/bash"; unixHomeDirectory="/home/ADUser01"} 

PS C:\Users\Administrator> Get-ADUser -Identity ADUser01 -Properties * | Out-String -Stream | Select-String "uidNumber","gidNumber","loginShell","unixHomeDirectory" 

gidNumber                            : 100
loginShell                           : /bin/bash
uidNumber                            : 5000
unixHomeDirectory                    : /home/ADUser01

Active Directory : Add UNIX attributes to Accounts (GUI)

	On GUI configuration, set like follows.
[2]	Add UNIX attrubutes to an existing user. Select [Advanced Features] on [View] menu on [Active Directory Users and Conputers] window.

[3]	Open [Properties] for a user you'd like to add UNIX attributes.

[4]	Move to [Attribute Editor] tab and open [uidNumber] attribute.

[5]	Input UID number that is used on Unix/Linux. Specify uniq number which does not exist on Unix/Linux Localhost.

[6]

Open [gidNumber] attribute and input GID number.
Specify uniq number which already exists on Unix/Linux Localhost, or Specify GID number which exists on Active Directory groups.
For GID number which exists on Active Directory groups, it means the GID which is added to an AD group with the same procedure on here.

[7]	Open [loginShell] attribute and input the Path of Login Shell on Unix/Linux. Specify it that exists on Unix/Linux Host.

[8]	Open [unixHomeDirectory] attribute and input the Path of Home Directory. It's possbile to login to Unix/Linux Host if the Path of Home Directory does not exist, If not exist, it will be created for initial login (if configured as so) or move to / (if not configured automatical mkhomedir).

Matched Content