Power

I am able to authenticate users with LDAP from an AD2016. IE
# lsuser -R LDAP ksun
ksun id=2209 pgrp=staff ...

When configure ldap, it is automatically figured out OU paths in /etc/security/ldap/ldap.cfg for automount and services
servicebasedn:OU=services,OU=nis,DC=...
automountbasedn:OU=autofs,OU=nis,DC=...

I created OU nis and sub-OU autofs and services when we setup SSSD for RHEL7/8.
My question is how/where to tell AIX to use automountbasedn:OU=autofs,OU=nis,... and servicebasedn:OU=services,OU=nis,DC=...

I understand the file /etc/irs.conf is similar/equivalent to /etc/nsswitch.conf on other unixe.
It currently look like this
automount nis_ldap files
services nis_ldap continue
services nis continue
services local
Do I need put more entries or do I need modify some other files?

The current /etc/methods.cfg

LDAP:
program = /usr/lib/security/LDAP
program_64 =/usr/lib/security/LDAP64

NIS:
program = /usr/lib/security/NIS
program_64 = /usr/lib/security/NIS_64

DCE:
program = /usr/lib/security/DCE

KRB5:
program = /usr/lib/security/KRB5
program_64 = /usr/lib/security/KRB5_64

And the curret /etc/security/ldap/ldap.cfg
#  grep '^[:a-z:]' /etc/security/ldap/ldap.cfg
ldapservers:ad-lex1
binddn:CN=Admin - ...
bindpwd:{DESv2}C1 ...
authtype:ldap_auth
useSSL:no
userattrmappath:/etc/security/ldap/sfur2user.map
groupattrmappath:/etc/security/ldap/sfur2group.map
userbasedn:CN=Users,DC=...
groupbasedn:CN=Users,DC=...
servicebasedn:OU=services,OU=nis,DC=...
automountbasedn:OU=autofs,OU=nis,DC=...
userclasses:user,person,organizationalperson
groupclasses:group
ldapport:389
searchmode:ALL
defaultentrylocation:LDAP

The LPAR is running AIX7.3

Any suggestion is appreciated.
Thanks!

--Kang

------------------------------
Kang Sun
------------------------------