Applies to:
Centrify Direct Control for Unix/Linux

Question:
Is there any configuration parameter that allow to map local unix user account to Active Directory account?

Answer:
Yes local unix account can be mapped to Active Directory account using the parameter pam.mapuser.username in centrifydc.conf file.Local user mapping allows you to set password policies in Active Directory even when a local UNIX account is used to log in. This parameter is most commonly used to map local system or application service accounts to an Active Directory account and password, but it can be used for any local user account.

If you are manually setting this parameter, you should note that the local account name you want to map to Active Directory is specified as the last portion of the configuration parameter name. The parameter value is the Active Directory account name for the specified local user. For example, the following parameter maps the local UNIX account oracle to the Active Directory account oracle_storm@acme.com if the host computer’s name is storm: pam.mapuser.oracle: oracle_$HOSTNAME@acme.com.

Please refer this configuration guide for more information(pg 120),
https://docs.centrify.com/en/css/suite2016/centrify-unix-config-guide.pdf?_ga=1.172474275.1010960202.1468440652