The Integration Pack is not meant to be upgraded. Each version of the Integration Pack installs its Policy Objects, Access Templates, Script Modules and Managed Units into a version-specific container to isolate the data objects for each version. However, the Integration Pack shares Web Interface modifications between all versions. For this reason, One Identity recommends that you uninstall the previous version before installing the new version.
When upgrading from one version of the Integration Pack to another, any customizations to Integration Pack data objects will be lost. To preserve Integration Pack customizations, One Identity recommends that you backup the modified objects before you uninstall the previous version. That is, copy or move the Access Templates, Policy Objects, Script Modules, or Virtual Attributes created by the old version of the Safeguard Authentication Services Support Pack for ActiveRoles Server Web Interface to a new location using ActiveRoles Server management console. These objects are located in the ActiveRoles Server configuration container.
To uninstall the Authentication Services ActiveRoles Integration
-
Navigate to the Control Panel > Programs > Programs and Features.
-
Right-click Safeguard Authentication Services ActiveRoles Integration, and click Uninstall.
-
In the Programs and Features dialog click Yes.
-
When prompted,
-
To remove the ActiveRoles Server configuration, click Yes.
This removes the server and Web Interface extensions from ActiveRoles Server.
-
To uninstall the Integration Pack but retain the ActiveRoles Server configuration, click No.
This leaves the ActiveRoles Server integration extensions in the console.
The Integration Pack allows you to automate the provisioning and deprovisioning of UNIX account attributes. You can also delegate rights to manage Unix accounts that reside in Active Directory. Managed Units allow you to locate the Unix users and groups in your ActiveRoles Server managed environment.
To access the ActiveRoles Server Console
-
From the Start menu, navigate to Program Files > Quest Software > ActiveRoles Server > ActiveRoles Server Console.
You can automatically Unix-enable users that are provisioned in ActiveRoles Server.
To automatically Unix-enable users
-
In the ActiveRoles Server Console, navigate to Configuration > Policies > Administration.
-
From the Action menu, select New > Provisioning Policy.
-
When the New Provisioning Policy Object Wizard starts, click Next.
-
On the Name and Description page, in the Name box, enter Unix-enable new users, then click Next.
-
On the Policy to Configure page, locate the Safeguard Authentication Services Integration Pack, select the Provision Unix User policy type, then click Next.
-
On the Policy Parameters page, select the AutoUnixEnable parameter and click Edit.
-
On the Edit Parameter page, from the Value: drop-down menu, select True, then click OK.
-
On the Policy Parameters page, click Next.
-
On the Enforce Policy page, click Add.
-
On the Select Objects page, click Browse, select Active Directory (to apply this policy to all new Active Directory users), and click OK.
-
On the Select Objects page, select the Active Directory item at the top of the list, click Add, then click OK.
-
On the Enforce Policy page, click Next.
-
Click Finish to create the new policy object.
-
To return to the ActiveRoles Server Console, in the ActiveRoles Server dialog, click OK.
When you provision a new user account, the Integration Pack automatically Unix-enables that account. That is, it populates the user's Unix attributes.
