Chat now with support
Chat mit Support

One Identity Management Console for Unix 2.5.3 - Administration Guide

One Identity Privileged Access Suite for Unix Introducing One Identity Management Console for Unix Installing Management Console for Unix Preparing Unix hosts Working with host systems Managing local groups Managing local users Active Directory integration Authentication Services integration Privilege Manager integration Reporting Setting preferences Security Troubleshooting tips
Auto profiling issues Active Directory Issues Auditing and compliance Cannot create a service connection point Check Authentication Services agent status commands not available CSV or PDF reports do not open Database port number is already in use Elevation is not working Hosts do not display Import file lists fakepath Information does not display in the console License information in report is not accurate Out of memory error Post install configuration fails on Unix or Mac Privilege Manager feature issues Profile task never completes questusr account was deleted Readiness check failed Recovering from a failed upgrade Reports are slow Reset the supervisor password Running on a Windows 2008 R2 domain controller Service account login fails Setting custom configuration settings Single Sign-on (SSO) issues JVM memory tuning suggestions Start/stop/restart Management Console for Unix service Toolbar buttons are not enabled UID or GID conflicts
System maintenance Command line utilities Web services Database maintenance

Unix-enable an Active Directory group

You can Unix-enable an Active Directory group from a group's properties on the Active Directory tab.

Note: This feature is only available if:

  • you have configured the mangement console to recognize Active Directory objects See Configuring the console to recognize Unix attributes in AD for details.
  • you are logged into the mangement console as an Active Directory account in the Manage Hosts role
  • you have rights in Active Directory to Unix-enable groups

To Unix-enable an Active Directory group

  1. On the mangement console's Active Directory tab, open the Find drop-down menu and choose Groups.
  2. Enter a group name, such as UNIX in the Search by name box and press Enter.
  3. Double-click the group name, such as UNIXusers to open its properties.

    Note: To set up the Active Directory group account, see Adding an Active Directory group account.

  4. On the Unix Account tab, select the Unix-enabled option and click OK.

Reviewing the Unix-enabled AD Groups report

The Unix-enabled AD Groups report identifies all Active Directory groups that have Unix group attributes.

To create the Unix-enabled AD Groups report

  1. From the mangement console, navigate to Reporting.
  2. From the Reports view, double-click the Unix-enabled AD Groups report name.

    The report opens a new Unix-enabled AD Groups tab on the Reports view.

    Note: This report is only available if you have configured the mangement console to recognize Active Directory objects (see Configuring the console to recognize Unix attributes in AD), and you are logged on as an Active Directory account in the Manage Hosts role.

  3. Choose the base container for the report.
  4. Open the Export drop-down menu and select the format you want to use for the report: PDF or CSV.

    It launches a new browser or application page and displays the report in the selected format.

Note: When generating multiple reports simultaneously or generating a single report that contains a large amount of data, One Identity recommends that you increase the JVM memory. See JVM memory tuning suggestions for details.

Unix-Enable an Active Directory User

An Active Directory user object is considered to be Unix-enabled when it has the following Unix user attributes assigned: UID Number, Primary GID Number, Home Directory and Login Shell.

Note: This feature is only available if:

  • you have configured the mangement console to recognize Active Directory objects. See Configuring the console to recognize Unix attributes in AD for details.
  • you are logged into the mangement console as an Active Directory account in the Manage Hosts role
  • you have rights in Active Directory to Unix-enable users.

To Unix-enable an Active Directory user

  1. On the mangement console's Active Directory tab, open the Find drop-down menu and choose Users.
  2. Click the Search by name box to search for all Active Directory users. Or, enter a portion of your ADuser log on name in the Search by name box and press Enter.
  3. Double-click ADuser, the Active Directory user name, to open its Properties.
  4. On the Unix Account tab, select the Unix-enabled option.

    It populates the Properties with default Unix attribute values.

  5. Make other modifications to these settings, if necessary, and click OK to Unix-enable the user.

    Note: You can use PowerShell to apply additional settings. PowerShell allows you to validate entries for the GECOS, Home Directory and Login Shell attributes. Please refer to the Authentication Services user documentation for more information on defining these additional settings using PowerShell cmdlets.

    Once enabled for Unix, you can log on to the host with that Active Directory user's log on name and password.

You can also Unix-enable Active Directory users from the Require AD Logon pane on the All Local Users tab.

To Unix-Enable an Active Directory user

  1. In the Require AD Logon pane, click the Search button to populate the list of Active Directory users.

    Click the Directory button to search in a specific folder.

  2. Select an Active Directory user and click the Properties button at the bottom of the Require AD Logon pane.
  3. Select the Unix Account tab from the user's properties.
  4. Select the Unix-enabled option and click OK.

Reviewing the Unix-enabled AD Users report

The Unix-enabled AD Users report identifies all Active Directory users with Unix user attributes.

To create the Unix-enabled AD Users report

  1. From the mangement console, navigate to Reporting.
  2. From the Reports view, double-click the Unix-enabled AD Users report name.

    The report opens a new Unix-enabled AD Users tab on the Reports view.

    Note: This report is only available if you have configured the mangement console to recognize Active Directory objects (see Configuring the console to recognize Unix attributes in AD), and you are logged on as an Active Directory account in the Manage Hosts role.

  3. Choose the base container for the report.
  4. Open the Export drop-down menu and select the format you want to use for the report: PDF or CSV.

    It launches a new browser or application page and displays the report in the selected format.

Note: When generating multiple reports simultaneously or generating a single report that contains a large amount of data, One Identity recommends that you increase the JVM memory. See JVM memory tuning suggestions for details.

Verwandte Dokumente

The document was helpful.

Bewertung auswählen

I easily found the information I needed.

Bewertung auswählen