Default and Named Cells in AD Bridge
There are two types of AD Bridge cells:
- Default cell: A cell associated with a domain or an entire enterprise. In a multi-domain topology, you create a default cell in each domain, and these domain-specific default cells merge into an enterprise-wide default cell.
- Named cell: A cell associated with an organizational unit (OU). Associating cells with OUs is a natural way to organize computers and users.
AD Bridge Enterprise lets you define a default cell that handles mapping for computers that are not in an OU with an associated named cell. The default cell for the domain can contain the mapping information for all your Linux and Unix computers. If you use Directory Integrated mode, various attributes are indexed in the global catalog by using the default cell.
In a multi-domain or multi-forest enterprise, the default cells of the domains merge into a single enterprise-wide default cell where users from each domain can authenticate with their credentials. Users' UIDs, GIDs, and other settings are defined separately in each domain, but nothing additional is needed at the domain-level to enable the user to authenticate.
Each forest that has a two-way transitive forest trust with the computer's forest is listed in the default cell. Each domain in each forest can opt in to this enterprise-wide default cell by creating a default cell in that domain. Any user who is listed in the default cell in a domain can be seen by the AD Bridge Enterprise-enabled operating system of any computer joined to the default cell.