One Identity Management Console for Unix 2.5.2 - Administration Guide

One Identity Privileged Access Suite for Unix Introducing One Identity Management Console for Unix Installing Management Console for Unix Preparing Unix hosts Working with host systems Managing local groups Managing local users Active Directory integration Authentication Services integration Privilege Manager integration
Getting started Configure a primary policy server Configure a secondary policy server Install PM agent or Sudo plugin on a remote host Security policy management
Opening a policy file Edit panel commands Editing PM policy files Reviewing the Access and Privileges by User report Reviewing the Access and Privileges by Host report
Event logs and keystroke logging
Reporting Setting preferences
User preferences System preferences
Security Troubleshooting tips
Auto profiling issues Active Directory Issues Auditing and compliance Cannot create a service connection point Check Authentication Services agent status commands not available CSV or PDF reports do not open Database port number is already in use Elevation is not working Hosts do not display Import file lists fakepath Information does not display in the console License information in report is not accurate Out of memory error Post install configuration fails on Unix or Mac Privilege Manager feature issues Profile task never completes questusr account was deleted Readiness check failed Recovering from a failed upgrade Reports are slow Reset the supervisor password Running on a Windows 2008 R2 domain controller Service account login fails Setting custom configuration settings Single Sign-on (SSO) issues JVM memory tuning suggestions Start/stop/restart Management Console for Unix service Toolbar buttons are not enabled UID or GID conflicts
System maintenance Command line utilities Web services Database maintenance About us

Resetting local user's password

Change a user's password from either the Users view of a host's properties or from the All Local Users tab.

Note: The Set Local User Password option is not available for users required to log in with Active Directory authentication because root does not have permission to change a password stored in Active Directory.

To change a local user's password

  1. Select one or more user names, right-click and choose Set Local User Password from the context menu.

  2. Enter the new password for the users and click OK.

  3. On the Log on to Host dialog, enter the user credentials and click OK.

    Note: This task requires elevated credentials.

System Users

You can mark local user accounts that are not associated with an actual user, as "system users" from either the Users view of a host's properties or from the All Local Users tab. The mangement console allows you to manually mark (or unmark) system users, or you can mark (or unmark) a range of system users. Once you mark a user as a system user, you can filter the Users list by displaying only the system users or only the non-system users.

You can also choose to mark a range of system users automatically when profiling a host by setting the Host System Users option in System Settings. See Automatically marking host system users for details.

Manually marking system users

You can mark multiple local user accounts that are not associated with an actual user, as "system users" from either the Users view of a host's properties or from the All Local Users tab. You mark system users for a specific host from the Users view of a host's properties and you mark system users for all hosts from the All Local Users tab.

To mark specific system users manually

  1. Select one or more users from the list that you want to identify as system users.
  2. Right-click the selected users and choose Mark as system user from the context menu.

    The status column icon changes to , the system user icon.

    When you mark a user as a "system user", the mangement console updates the number of System Users in the Local User Statistics pane of the All Local Users tab.

    Note: The Local User Statistics pane only displays if you have Authentication Services 4.x installed and when you are logged on as an Active Directory account in the Manage Hosts role.

To unmark specific system users manually

  1. Select one or more users from the list that you want to identify as system users.
  2. Right-click the selected users and choose Unmark as system user.

    The status column icon reverts to , the regular user icon.

Marking multiple system users

To mark multiple system users

  1. Open the User drop-down menu on either the Users view of a host's properties or from the All Local Users tab, and choose Mark system users.

    Note: To unmark multiple system users, choose Unmark system users.

  2. On the Mark System Users dialog, enter a UID number or range of numbers to mark.

    Use a colon (:) to signify a range of numbers; comma delimit multiple numbers or ranges. For example,

    0:499,501,555:600

    Note: Do not add extra spaces.

  3. Enter specific account names you want to mark. For example,
    root,web*,*nobody,ma?k

    Note: Comma delimit multiple names; do not add extra spaces. You can use wildcards in the text string, such as * and ?.

    The status column icon changes to , the system user icon. It reverts to , the regular user icon, when you unmark system users.

Note: You can enable the mangement console to mark local user accounts as "system users" when it profiles hosts.

See Automatically marking host system users for details.

Documents connexes