One Identity Manager maps the user accounts and groups of a Unix host. These objects are imported into the One Identity Manager database during synchronization. You cannot display or edit their properties in the Manager.
Managing Unix-based systems
Architecture overview
One Identity Manager users for managing Unix-based target systems
Configuration parameters for managing Unix-based target systems
Synchronizing Unix-based target systems
Setting up initial synchronization with a Unix host
Managing Unix user accounts and identities
Users and permissions for synchronizing with a Unix-based target system
Configuring Unix the host
Setting up a synchronization server for Unix-based target systems
Customizing the synchronization configuration
System requirements for the Unix synchronization server
Installing One Identity Manager Service with a Unix or AIX connector
Creating a synchronization project for initial synchronization of a Unix host
Information required for setting up a synchronization project
Creating an initial synchronization project for a Unix host
Configuring the synchronization log
Configuring Unix host synchronization
Configuring synchronization of several Unix hosts
Changing system connection settings of Unix hosts
Updating schemas
Configuring the provisioning of memberships
Configuring single object synchronization
Accelerating provisioning and single object synchronization
Running synchronization
Starting synchronization
Deactivating synchronization
Displaying synchronization results
Synchronizing single objects
Tasks following synchronization
Post-processing outstanding objects
Adding custom tables to the target system synchronization
Managing Unix user accounts through account definitions
Troubleshooting
Ignoring data error in synchronization
Pausing handling of target system specific processes (Offline mode)
Account definitions for Unix user accounts
Managing memberships in Unix groups
Creating account definitions
Editing account definitions
Main data for an account definition
Editing manage levels
Creating manage levels
Assigning manage levels to account definitions
Main data for manage levels
Creating mapping rules for IT operating data
Entering IT operating data
Modify IT operating data
Assigning account definitions to identities
Assigning identities automatically to Unix user accounts
Assigning account definitions to departments, cost centers, and locations
Assigning account definitions to business roles
Assigning account definitions to all identities
Assigning account definitions directly to identities
Assigning account definitions to system roles
Adding account definitions to the IT Shop
Assigning account definitions to Unix hosts
Deleting account definitions
Editing search criteria for automatic identity assignment
Finding identities and directly assigning them to user accounts
Changing manage levels for Unix user accounts
Supported user account types
Default user accounts
Administrative user accounts
Specifying deferred deletion for Unix user accounts
Providing administrative user accounts for one identity
Providing administrative user accounts for several people
Privileged user accounts
Assigning Unix groups to Unix user accounts
Login credentials for Unix user accounts
Prerequisites for indirect assignment of Unix groups to Unix user accounts
Assigning Unix groups to departments, cost centers and locations
Assigning Unix groups to business roles
Adding Unix groups to system roles
Adding Unix groups to the IT Shop
Assigning Unix user accounts directly to Unix groups
Assigning Unix groups directly to Unix user accounts
Effectiveness of membership in Unix user groups
Unix group inheritance based on categories
Overview of all assignments
Password policies for Unix user accounts
Mapping Unix objects in One Identity Manager
Predefined password policies
Using password policies
Creating password policies
Editing password policies
General main data for password policies
Character classes for passwords
Policy settings
Custom scripts for password requirements
Password exclusion list
Checking a password
Testing password generation
Initial password for new Unix user accounts
Email notifications about login data
Unix hosts
Handling of Unix objects in the Web Portal
Basic data for Unix-based target systems
Configuration parameters for managing Unix-based target systems
Default project template for Unix-based target systems
Unix connector settings
General main data of Unix hosts
Defining categories for the inheritance of entitlements
Editing the synchronization project for a Unix host
Displaying the Unix hosts overview
Displaying Unix login shells
Unix user accounts
Creating and editing Unix user accounts
General main data of Unix user accounts
User account main data for AIX systems
Unix groups
Limits for user accounts
Password data for user accounts
Security-related main data for user accounts
Main data for user accounts on an encrypted file system
Assigning extended properties to Unix user accounts
Disabling AIX system user accounts
Deleting and restoring Unix user accounts
Displaying the Unix user account overview
Creating and editing Unix groups
General main data for Unix groups
Adding Unix groups to Unix groups
Assigning extended properties to Unix groups
Deleting Unix groups
Displaying the Unix group overview
Reports about Unix objects
Mapping Unix objects in One Identity Manager
Unix hosts
The target system of synchronization with a Unix-based target system is the host. Hosts are added as the base objects of the synchronization in One Identity Manager. They are used to configure provisioning processes, automatic assignment of identities to user accounts, and to pass down Unix user groups to user accounts.
NOTE: One Identity Manager sets up the domains in the Synchronization Editor database. After initial synchronization of the hosts, you must enter the primary group, which will be used by default to set up the user accounts.
To edit the main data for a Unix host
-
In the Manager, select the Unix > Hosts category.
-
Select the host in the result list.
-
Select the Change main data task.
-
Edit the host's main data.
- Save the changes.
Related topics
General main data of Unix hosts
Enter the following general main data.
| Property | Description | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|
|
Host name |
Name of the host. | |||||||||
|
Primary group |
User account's primary group. This group is used as primary group when creating a user account. | |||||||||
|
Time zone |
Time zone of the host. The time zone is taken into account when determining the last login time for user accounts. | |||||||||
|
Device |
The computer is connected to this device. Specify a new device using the | |||||||||
|
AIX system |
Specifies whether this host is an IBM AIX system. The following properties are offered additionally for user accounts on IBM AIX systems. | |||||||||
|
Account definition (initial) |
Initial account definition for creating user accounts. This account definition is used if automatic assignment of identities to user accounts is used for this host and user accounts should be created that are already managed (Linked configured state). The account definition's default manage level is applied. User accounts are only linked to the identity (Linked) if no account definition is given. This is the case on initial synchronization, for example. | |||||||||
|
Target system managers |
Application role, in which target system managers are specified for the host. Target system managers only edit the objects from hosts that are assigned to them. Therefore, each host can have a different target system manager assigned to it. Select the One Identity Manager application role whose members are responsible for administration of this host. Use the | |||||||||
|
Synchronized by |
Type of synchronization through which the data is synchronized between the host and One Identity Manager. As soon as objects for this host are available in One Identity Manager, the type of synchronization can no longer be changed. If you create a host with the Synchronization Editor, One Identity Manager is used.
NOTE: If you select No synchronization, you can define custom processes to exchange data between One Identity Manager and the target system. | |||||||||
|
Operating system description |
Description of the operating system. | |||||||||
|
Distribution |
Installed distribution of the operating system. | |||||||||
|
Distribution version |
Version of the installed distribution. | |||||||||
|
Kernel version |
Current version of the kernel. | |||||||||
|
Operating system type |
Type of operating system, such as Linux, AIX, or UNIX. |
button next to the menu.Defining categories for the inheritance of entitlements
To define a category
-
In the Manager, select the host in the Unix > Hosts category.
-
Select the Change main data task.
-
Switch to the Mapping rule category tab.
-
Extend the relevant roots
-
To enable the category, double-click
.
-
Enter a category name of your choice for user accounts and
- Save the changes.