Tchater maintenant avec le support
Tchattez avec un ingénieur du support

Safeguard Authentication Services 5.0.3 - Administration Guide

Privileged Access Suite for Unix Introducing One Identity Safeguard Authentication Services Unix administration and configuration Identity management Migrating from NIS Managing access control Managing local file permissions Certificate Autoenrollment Integrating with other applications Managing Unix hosts with Group Policy
Safeguard Authentication Services Group Policy
Group Policy Concepts Unix policies One Identity policies
Display specifiers Troubleshooting Glossary

Licensing policy

You can maintain and distribute license files through Safeguard Authentication Services Group Policy using the Licensing Policy. This policy is retained for backward compatibility. Alternatively, in Safeguard Authentication Services 5.0.1 and above, you can use the Safeguard Authentication Services Control Center to manage licenses.

The Safeguard Authentication Services Licensing policy allows you to specify a set of license files. The next time the Group Policy agent does a policy refresh, Group Policy distributes the license files to the Unix system and performs any additional actions that may be necessary to load the license file information.

Safeguard Authentication Services Licensing entries are append only and cannot be overridden. However, if there is more than one license file with the same serial number, the file is only installed once.

Adding a license file

To add an Safeguard Authentication Services license file

  1. Start Group Policy Editor.
  2. Select Unix Settings | Authentication Services | Client Configuration in the scope view.

  3. Double-click Licensing.

    The Licensing Properties dialog opens.

  4. Click Browse.
  5. Navigate to the license file.
  6. Select the license file and click OK.
  7. Click OK to save settings and close the Licensing Properties dialog.

Defender Settings policy

Defender Settings policy provides one-time password authentication. Install Defender on Unix or Linux to use two-factor authentication to secure critical resources. In order to access a host running Defender, you must enter a one-time password in addition to the account password.

Configure the Defender Settings policy to enable PAM authentication. The Group Policy agent on Unix configures Defender based on the existing Defender access nodes in Active Directory. This allows you to configure which users to prompt for a one-time password as well as which Defender server the agents can communicate with. For more information on configuring Defender access nodes, refer to the One Identity Defender documentation.

Enabling one-time password authentication for Unix

To enable one-time password authentication for Unix

  1. In the Group Policy Object Editor, navigate to Unix Settings | Quest Defender.
  2. Double-click the Defender Settings policy in the right-hand pane.
  3. Click Enable Defender PAM authentication.

  4. Configure Defender to require a one-time password for specific login services, or all login services.

    A login service is any process that authenticates a user to a Unix host. You configure login services for PAM in the pam.conf file. By default, sshd and ssh are automatically configured since this is the most typical scenario. You can specify additional services. The name of the service must correspond to the service name in PAM.conf. On some platforms the service names may differ, in that case, specify all service names for all platforms where you have installed Defender.

    • To prompt for a one-time password for all services, select Require Defender PAM authentication for all services.
  5. Click OK to save your settings and close the Defender Settings Properties dialog.
Documents connexes

The document was helpful.

Sélectionner une évaluation

I easily found the information I needed.

Sélectionner une évaluation