How to setup search paths? (4285795)

How to setup search paths?

Here is how to setup a user or group search path

Replace the DNs below with the location of your Unix Users or Groups:

# /opt/quest/bin/vastool configure vas vasd user-search-path "<ou=unixusers,dc=yourdomain.com,dc=com;dc=t,dc=yourdomain2,dc=com>"
# /opt/quest/bin/vastool configure vas vasd group-search-path "<ou=unixgroups,dc=yourdomain.com,dc=com; dc=t,dc=yourdomain2,dc=com>"
 

This can also be done with VGP:

a) On your Domain Controller open Group Policy Management
b) Locate the specific Group Policy Object, right-click and choose Edit...
c) Expand Unix Settings | Quest Authentication Services and select Client Configuration
d) Double-click VAS Configuration
e) Expand the vasd section
f) Then select user-search-path and group-search-path and enter the required DNs.

Here is some information from our man page:

user-search-path = <DN>[;<DN>]...
Default value: entire AD domain the host is joined to

This option can be used to specify a list of Active Directory
containers that vasd will use to load users from initially. The
option value must be a semicolon-separated list of distinguished
names. Normally these will be organizational units, but they can be
any Active Directory container that can contain user objects. vasd
will only load Unix enabled users from this path, not User
Personalities. The containers may be from any domain that the
computer object used by vasd can search.

group-search-path = <DN>[;<DN>]...
Default value: The entire AD domain the host is joined to

This option is used to specify a list of Active Directory
containers that vasd will use to load groups from initially. The
option value must be a semicolon-separated list of distinguished
names. Normally these will be organizational units, but they can be
any Active Directory container that can contain group objects.
vasd will only load Unix enabled groups from this path, not Group
personalities. The containers may be from any domain that the
computer object used by vasd can search.