Do the following:
Identify the Active Directory users and groups that need access to NSS resources.
You can assign the NSS trustee rights to your AD users and groups in two ways:
Using NFARM (Windows explorer shell extension) or rights utility on the OES server. For more information about NFARM, see Section 7.5, NFARM (OES File Access Rights Management) and rights in OES 2018 SP3: NSS File System Administration Guide for Linux.
Using the NURM utility. This method assumes that at least some of your network users and groups have identities in both eDirectory and Active Directory that can be mapped to each other. For more information about NURM, see Section 7.4, NURM (OES User Rights Map).
NOTE:If an AD user group membership is modified between the user login to AD domain and mapping to OES CIFS server, the AD user must logout and login again to the AD domain to perform the file operations on OES server.