UNIX for Dummies Questions & Answers

Hello,

I've configured an user authentication against Active Directory (Windows Server 2008 R2) on AIX V6 with LDAP. It works fine.

And here's my problem:

How can I control ldap user permissions on the local AIX machine?
E.g. an AD user should be able to write all files of local sys group.
(You cannot add a LDAP user to a local group)

There is the posibility to create an Active Directory group with UNIX attributes and set the GID with the same number of the local GID on the AIX system.
But:
Is there a good solution to control permissions of LDAP user?

Thank you for every suggest!

I am having the same problem and creating groups with the same GUIDs in Active Directory isn't a practical solution.

I have read forum updates elsewhere that discuss using PAM modules to do this successfully on Linux so maybe that's directly translatable to AIX.