Active Directory Account Template: Use System Assigned UID Attribute Configuration

Products

• CA Identity Manager
• CA Identity Suite

Issue/Introduction

The "Use System Assigned UID" option is located on the UNIX Attributes tab of an Active Directory (ADS) account or account template property sheet. This setting automates the assignment of unique identifiers (UIDs) for users within a Network Information Service (NIS) domain.

Environment

Identity Manager 14.x

Resolution

When the Use System Assigned UID option is enabled, the system automates the following workflow to ensure unique uidNumber assignment:

1. Validation Check: The ADS CCS plug-in agent checks if a value for the uidNumber attribute has been manually provided.
2. Attribute Lookup: If no value is provided, the agent queries the ADS msSFU30MaxUidNumber attribute.
3. Path Resolution: The agent retrieves this value from the following DN branch in your Active Directory:
   • CN=System, [Your Domain Path]
4. Automatic Assignment: The agent uses the retrieved value to set the next available UID for the new account, ensuring consistency across the NIS domain.