AD LDS Identity Mapping for Services for NFS

Applies To: Windows Server 2008

This guide explains how to configure Active Directory® Lightweight Directory Services (AD LDS) for Services for Network File System (NFS) on computers that are running Windows Server® 2008 in an environment where no Active Directory exists to support user mapping.

When a UNIX client that is using auth sys credentials (for example, UID=500 and GID=500) connects to a Windows-based server with the Services for NFS role installed, Server for NFS queries AD LDS for objects that match the uidNumber (in this case, uidNumber=500). Server for NFS then queries the samAccountName attribute of the object, which returns the username string of a local account. Server for NFS uses the credentials of this local user.

For the purposes of this guide, we will configure AD LDS for the server server1, which is a non-domain joined system or a member of a workgroup.

In this guide: