Chat now with support
Tchattez avec un ingénieur du support

One Identity Management Console for Unix 2.5.2 - Administration Guide

One Identity Privileged Access Suite for Unix Introducing One Identity Management Console for Unix Installing Management Console for Unix Preparing Unix hosts Working with host systems Managing local groups Managing local users Active Directory integration Authentication Services integration Privilege Manager integration
Getting started Configure a primary policy server Configure a secondary policy server Install PM agent or Sudo plugin on a remote host Security policy management
Opening a policy file Edit panel commands Editing PM policy files Reviewing the Access and Privileges by User report Reviewing the Access and Privileges by Host report
Event logs and keystroke logging
Reporting Setting preferences
User preferences System preferences
Security Troubleshooting tips
Auto profiling issues Active Directory Issues Auditing and compliance Cannot create a service connection point Check Authentication Services agent status commands not available CSV or PDF reports do not open Database port number is already in use Elevation is not working Hosts do not display Import file lists fakepath Information does not display in the console License information in report is not accurate Out of memory error Post install configuration fails on Unix or Mac Privilege Manager feature issues Profile task never completes questusr account was deleted Readiness check failed Recovering from a failed upgrade Reports are slow Reset the supervisor password Running on a Windows 2008 R2 domain controller Service account login fails Setting custom configuration settings Single Sign-on (SSO) issues JVM memory tuning suggestions Start/stop/restart Management Console for Unix service Toolbar buttons are not enabled UID or GID conflicts
System maintenance Command line utilities Web services Database maintenance About us

Set Supervisor Password dialog

The supervisor account is the default account for accessing all features of the mangement console. The supervisor is a member of all roles and no permissions can be removed from supervisor. However, the supervisor does not have Active Directory credentials and therefore is blocked from performing Active Directory tasks.

To set the supervisor password

  1. On the Set supervisor password dialog, enter a password for the supervisor account and click Next.

    The Summary dialog displays.

  2. To log on using the console supervisor account, use supervisor as the user name.

Note: The supervisor is the only account that has rights to change the supervisor account password in System Settings. See Reset the supervisor password for details.

Summary dialog

To complete the Management Console for Unix Setup wizard

  1. On the Summary dialog, click Finish.

    The Management Console for Unix log-in screen opens.

Management Console for Unix Log On page

Whenever you launch the mangement console, you must enter an authorized account to proceed. The Management Console for Unix features that are available depend on the account with which you log in.

To use the core version of the mangement console to manage local Unix users and groups and to access system settings, you must use the supervisor account (that is, you must log on with the supervisor user name). However, to use the Active Directory features of Management Console for Unix, you must log on with an Active Directory account that has been granted access to the mangement console. That is, defined during the post-installation configuration. See Set up console access by role for details. To add additional accounts to this access list, see Adding (or Removing) role members.

To log on to the mangement console

  1. Enter the user name and password and click Sign In.

    Enter:

    • the supervisor account name
    • a sAMAccountName, which uses the default domain
    • a User Principal Name in the form, username@domain

    The mangement console opens and displays the user name you specified in the upper right-hand corner of the screen.

  2. To log on using a different account, click the authenticated user's login name and click Sign Out. Then sign back on using a different account.

    The Log-on page redisplays, allowing you to enter a different account.

Management Console components

Note: What a user sees in the mangement console is based on the rules that pertain to the role the user is assigned. A user can only access and perform tasks specified for that role.

The mangement console consists of the following main components:

  • Tabs
  • Views
  • Task Progress pane
  • Status bar

Documents connexes