Thanks all for your valuable feebacks.

sorry for not replying earlier, i was busy trying to fix it and i managed to use rbac roles and profiles defined locally to be used by LDAP MS AD users.

it was more simple than i thought ..

all you have to do is define rbac properly then edit the /etc/user_attr manually and add a line per user.

Details below:

Configure RBAC:

1. /usr/sbin/roleadd -u 2000 -g 10 -d /export/home/unixpa -m unixpa
2. passwd unixpa
3. /usr/bin/grep -i unixpa /etc/passwd
4. /usr/sbin/rolemod -P "Primary Administrator" unixpa
5. /usr/bin/profiles unixpa


file attached (snapshot) of /etc/user_attr line needs to be added for each MS AD user

then login with AD user normally , su to RBAC role and thats it , you have Primary Administrator Role.

soon ill finish documenting the complete procedure as proof of concept for the management , along with auto creation of home directories if it didnt exist using one of two options (compiled pam or auto_home with NFS).

sorry again for the late reply and thanks to you all.

whoever needs a copy of the document (within a week will be ready) inshallah, drop me and email of i can post it here too if needed.