One Identity Management Console for Unix 2.5.2 - Administration Guide

One Identity Privileged Access Suite for Unix Introducing One Identity Management Console for Unix Installing Management Console for Unix Preparing Unix hosts Working with host systems Managing local groups Managing local users Active Directory integration Authentication Services integration Privilege Manager integration
Getting started Configure a primary policy server Configure a secondary policy server Install PM agent or Sudo plugin on a remote host Security policy management
Opening a policy file Edit panel commands Editing PM policy files Reviewing the Access and Privileges by User report Reviewing the Access and Privileges by Host report
Event logs and keystroke logging
Reporting Setting preferences
User preferences System preferences
Security Troubleshooting tips
Auto profiling issues Active Directory Issues Auditing and compliance Cannot create a service connection point Check Authentication Services agent status commands not available CSV or PDF reports do not open Database port number is already in use Elevation is not working Hosts do not display Import file lists fakepath Information does not display in the console License information in report is not accurate Out of memory error Post install configuration fails on Unix or Mac Privilege Manager feature issues Profile task never completes questusr account was deleted Readiness check failed Recovering from a failed upgrade Reports are slow Reset the supervisor password Running on a Windows 2008 R2 domain controller Service account login fails Setting custom configuration settings Single Sign-on (SSO) issues JVM memory tuning suggestions Start/stop/restart Management Console for Unix service Toolbar buttons are not enabled UID or GID conflicts
System maintenance Command line utilities Web services Database maintenance About us

Add host to the console

To add a new computer to the mangement console

Powershell:

New-QmcuComputer -ComputerName test.example.com

Unix CLI:

new-qmcucomputer -c test.example.com

You can also pipe commands together to accomplish a set of tasks.

To add, profile, and cache a computer's credentials, pipe these commands together:

Powershell:

New-QmcuComputer -ComputerName test.example.com | Set-QmcuComputerCredential | Update-QmcuComputer
Login
SSH to computer: test.example.com 
User: root
Password for user root: *******

Unix CLI:

new-qmcucomputer -c test.example.com | set-qmcucomputercredential | update-qmcucomputer 
Specify credentials to log in to test.example.com:
Username: root
Password: *******
  • New-QmcuComputer adds the computer to the console.
  • Set-QmcuComputerCredential caches the computers credentials.
  • Update-QmcuComputer updates the computers profile.

The mangement console prompts you for the user name and password when it sets the credentials.

Create local group across all managed hosts

To create a new group named "admins" on all "Linux" computers

Powershell:

Find-QmcuComputer -Filter "OperatingSystemName=Linux" | New-QmcuGroup -Groupname admins

Unix CLI:

find-qmcucomputer -f "OperatingSystemName=Linux" | new-qmcugroup -C –n admins

Add a local user to a group on each managed host

To add local users fred, joe, and bob to the admins group on each managed host

Powershell:

Find-QmcuGroup -Filter "Name=admins" | Add-QmcuGroupMember -Member fred,joe,bob

Unix CLI:

find-qmcugroup -f “Name=admins” | add-qmcugroupmember -m fred joe bob

Add localuser to a group on all Linux machines

To add localuser to a group on all Linux machines

Powershell:

Find-QmcuComputer -Filter "OperatingSystemName=Linux*" | Add-QmcuGroupMember -GroupName admins -Member localuser

Unix CLI:

find-qmcucomputer -f “OperatingSystemName=Linux*” | add-qmcugroupmember -n admins -m localuser
Documents connexes