Group Attributes in Hierarchical Zones

A group extension object is a serviceConnectionPoint object that is created in the Groups sub-container of the zone. The pseudoattributes for this object are stored in the keywords attribute.

Group attribute Stored in Active Directory attribute Inherited
version displayName=\$CimsZoneVersion4 or, for RFC 2307 objects, use version 5: displayName=\$CimsZoneVersion5 No
name keywords:login:Name For example: keywords:login:ibmdba Yes
gid keywords:gid:value For example: keywords:gid:458 If the group is in a standard zone, the GID is stored as gid:xxx in the keywords attribute. If the group is in an RFC 2307 zone, the GID is stored in the schema's gid attribute. Yes
parentLink keywords:parentLink:MS-SID For example: keywords:parentLink:S-1-5-21-387451290 No
IsMembershipRequired keywords:required:value For example: keywords:required:true Yes
InheritFromParent keywords:inherit:value For example: keywords:inherit:true No