Chat now with support
Chat mit Support

Safeguard Authentication Services 5.0.2 - Installation Guide

Privileged Access Suite for Unix Introducing One Identity Safeguard Authentication Services Installing and configuring Safeguard Authentication Services Installing and joining from the Unix command line Getting started with Safeguard Authentication Services
Getting acquainted with the Control Center Learning the basics
Troubleshooting Enterprise package deployment

PowerShell cmdlets

Safeguard Authentication Services supports the flexible scripting capabilities of PowerShell to automate administrative, installation, and configuration tasks. A wide range of new PowerShell cmdlets are included in Safeguard Authentication Services.

Table 32: PowerShell cmdlets
cmdlet name Description

Add-QasLicense

 Installs an Safeguard Authentication Services license file in Active Directory. Licenses installed this way are downloaded by all Unix clients.

Clear-QasUnixGroup

 Clears the Unix identity information from group object in Active Directory. The group is no longer Unix-enabled and will be removed from the cache on the Safeguard Authentication Services Unix clients.

Clear-QasUnixUser

 Clears the Unix identity information from a user object in Active Directory. The user is no longer Unix-enabled will be removed from the cache on the Safeguard Authentication Services Unix clients.

Disable-QasUnixGroup

 Unix-disables a group and will be removed from the cache on the Safeguard Authentication Services Unix clients. Similar to Clear-QasUnixGroup except the Unix group name is retained.

Disable-QasUnixUser

 Removes an Active Directory user‘s ability to log in on Unix hosts. (The user will still be cached on the Safeguard Authentication Services Unix clients.)

Enable-QasUnixGroup

 Enables an Active Directory group for Unix by giving a Unix GID number. The GID number is automatically generated.

Enable-QasUnixUser

 Enables an Active Directory user for Unix. The required account attributes UID number, primary GID number, GECOS, login shell, and home directory are generated automatically.

Get-QasConfiguration

 Returns an object representing the Safeguard Authentication Services application configuration data stored in Active Directory.

Get-QasGpo

 Returns a set of objects representing GPOs with Unix and/or macOS settings configured. This cmdlet is in the Quest.AuthenticationServices.GroupPolicy module.

Get-QasLicense

 Returns objects representing the Safeguard Authentication Services product licenses stored in Active Directory.

Get-QasOption

 Returns a set of configurable global options stored in Active Directory that affect the behavior of Safeguard Authentication Services.

Get-QasSchema

 Returns the currently configured schema definition from the Safeguard Authentication Services application configuration.

Get-QasSchemaDefinition

 Returns a set of schema templates that are supported by the current Active Directory forest.

Get-QasUnixGroup

 Returns an object that represents an Active Directory group as a Unix group. The returned object can be piped into other cmdlets such as Clear-QasUnixGroup or Enable-QasUnixGroup.

Get-QasUnixUser

 Returns an object that represents an Active Directory user as a Unix user. The returned object can be piped into other cmdlets such as Clear-QasUnixUser or Enable-QasUnixUser.

Get-QasVersion

 Returns the version of Safeguard Authentication Services currently installed on the local host.

Move-QasConfiguration

 Moves the Safeguard Authentication Services application configuration information from one container to another in Active Directory.

New-QasAdConnection

 Creates an object that represents a connection to Active Directory using specified credentials. You can pass a connection object to most Safeguard Authentication Services cmdlets to execute commands using different credentials.

New-QasArsConnection

 Creates an object that represents a connection to an Active Roles Server using the specified credentials. You can pass a connection object to most Safeguard Authentication Services cmdlets to execute commands using different credentials.

New-QasConfiguration

 Creates a default Safeguard Authentication Services application configuration in Active Directory and returns an object representing the newly created configuration.

Remove-QasConfiguration

Accepts a Safeguard Authentication Services application configuration object as input and removes it from Active Directory. This cmdlet produces no output.

Remove-QasLicense

 Accepts an Safeguard Authentication Services product license object as input and removes the license from Active Directory. This cmdlet produces no output.

Set-QasOption

 Accepts an Safeguard Authentication Services options set as input and saves it to Active Directory.

Set-QasSchema

 Accepts an Safeguard Authentication Services schema template as input and saves it to Active Directory as the schema template that will be used by all Safeguard Authentication Services Unix clients.

Set-QasUnixGroup

 Accepts a Unix group object as input and saves it to Active Directory. You can also set specific attributes using command line options.

Set-QasUnixUser

 Accepts a Unix user object as input and saves it to Active Directory. You can also set specific attributes using command line options.

Safeguard Authentication Services PowerShell cmdlets are contained in PowerShell modules named Quest.AuthenticationServices and Quest.AuthenticationServices.GroupPolicy. Use the Import-Module command to import the Safeguard Authentication Services commands into an existing PowerShell session.

Change Auditor for Authentication Services

Change Auditor for Authentication Services allows you to track changes and send alerts on:

  • Changes to Active Directory objects and attributes
  • Changes to Unix and macOS settings in Group Policy Objects
  • Changes to product settings and configuration

Installing Change Auditor for Authentication Services

The following steps outline the basic procedure for installing Change Auditor for Authentication Services. See the Change Auditor Installation Guide to obtain detailed steps for installing Change Auditor for Authentication Services.

To install Change Auditor for Authentication Services

  1. Insert the Safeguard Authentication Services distribution media.

    The Autorun Home page displays.

    Note: If the Autorun Home page does not display, navigate to the root of the distribution media and double-click autorun.exe.

  2. Click the Setup tab and select Change Auditor for Authentication Services.

    The Change Auditor for Authentication Services for Active Directory web page opens.

  3. Click Download on the left navigation panel.
  4. Follow the online instructions to gain access to the Trial Download page.
  5. From the Trial Download: Change Auditor for Active Directory page, click the Installation Guide link.

Defender

One Identity Defender, another One Identity product, provides strong authentication functionality that makes it possible for an Active Directory user to use a hardware or software token to authenticate to Unix, Linux, or macOS platforms.

Verwandte Dokumente

The document was helpful.

Bewertung auswählen

I easily found the information I needed.

Bewertung auswählen