Id sync - AD to DS 5.2

Question

I have idsync for windows setup and syncing users between AD and DS 5.2
Question. If a new user is created in AD and sent over to DS5.2, how do I populate their uid, gid and homedir attributes with appropriate values? (i.e and uid & gid that don't previously exist and a valid homedir).
Perhaps this is more a business process than technical question since those 3 values would have to be entered manually or using a script to validate?
thank you

Answer 1

Here's a code snippet from one of my scripts. When I posted this elsewhere (either here or another Sun forum) it was pointed out that it's not multi-user safe. Some type of "lock" mechanism will be necessary so concurrent users don't get the same UID.
    # sort the current password entries, start searching at UIDs
    # greater than 200.  When a sequential "hole" is found, fill it.
    uid=`getent passwd | sort -t: -n +2 -3 | awk -F: 'BEGIN{ prev=200 }
       { if ( $3 > 200 ) {
           if ( $3 != (prev +1) ) {
              print prev +1;
              exit;
           prev = $3;
       }'`GID assignment is non-trivial. You need to logically group users by task, org or project and assign accordingly.
HTH,
Roger S.