linux ldap active directory

From: melissa_benkyo (wyl_lyf_at_yahoo.com)
Date: 04/28/04 

Date: 28 Apr 2004 11:50:02 -0700

Hello all,
 
This is my ldap.conf file. I'm connecting to an active directory but
I'm failing on getent group. /etc/nsswitch.conf has the following
entry group: files ldap. It doesn't bring back the posixGroups from
active directory. But when doing a strace it does return the first
entry which is a CN=Domain Computer, CN=Users,...
 
ldap.conf
host xxx
base dc=example,dc=com
scope sub
binddn xxx
bindpw xxx
nss_base_passwd cn=Users,dc=example,dc=com?sub
nss_base_shadow cn=Users,dc=example,dc=com?sub
nss_base_group cn=Users,dc=example,dc=com?sub
nss_map_objectclass posixAccount User
nss_map_objectclass shadowAccount User
nss_map_objectclass posixGroup Group
nss_map_attribute uid sAMAccountName
nss_map_attribute cn sAMAAccountName
nss_map_attribute uniqueMember member
nss_map_attribute userPassword msSFUPassword
nss_map_attribute homeDirectory msSFUHomeDirectory
pam_login_attribute sAMAccountName
pam_filter objectclass=user
pam_password ad
 
does anybody know what I'm missing?
 
thanks!