Unix host
The target system of synchronization with a Unix-based target system is the host. Hosts are added as the base objects of the synchronization in One Identity Manager. They are used for to configure process provisioning, automatic assignment of employees to user accounts, and for inheriting user accounts from Unix user groups.
NOTE: One Identity Manager sets up the domains in the Synchronization Editor database. After initial synchronization of the hosts, you must enter the primary group, which will be used by default to set up the user accounts.
To edit the main data for a Unix host
-
In the Manager, select the Unix > Hosts category.
-
Select the host in the result list.
-
Select the Change main data task.
-
Edit the host's main data.
- Save the changes.
Related topics
General main data of Unix hosts
Enter the following data on the General tab.
Table 20: General main data for a host
|
Host name |
Name of the host. |
|
Primary group |
User account's primary group. This group is used as primary group when creating a user account. |
|
Device |
The computer is connected to this device. Specify a new device using the  button next to the menu. |
|
AIX system |
Specifies whether this host is an IBM AIX system. The following properties are offered additionally for user accounts on IBM AIX systems. |
|
Account definition (initial) |
Initial account definition for creating user accounts. This account definition is used if automatic assignment of employees to user accounts is used for this host and user accounts should be created that are already managed (Linked configured state). The account definition's default manage level is applied.
User accounts are only linked to the employee (Linked) if no account definition is given. This is the case on initial synchronization, for example. |
|
Target system managers |
Application role, in which target system managers are specified for the host. Target system managers only edit the objects from hosts that are assigned to them. Therefore, each host can have a different target system manager assigned to it.
Select the One Identity Manager application role whose members are responsible for administration of this host. Use the button to add a new application role. |
|
Synchronized by |
Type of synchronization through which the data is synchronized between the host and One Identity Manager. As soon as objects for this host are available in One Identity Manager, the type of synchronization can no longer be changed.
If you create a host with the Synchronization Editor, One Identity Manager is used.
Table 21: Permitted values
|
One Identity Manager |
Unix connector |
Unix connector |
|
No synchronization |
none |
none |
NOTE: If you select No synchronization, you can define custom processes to exchange data between One Identity Manager and the target system. |
|
Operating system description |
Description of the operating system. |
|
Distribution |
Installed distribution of the operating system. |
|
Distribution version |
Version of the installed distribution. |
|
Kernel version |
Current version of the kernel. |
|
Operating system type |
Type of operating system, such as Linux, AIX, or UNIX. |
Defining categories for the inheritance of entitlements
In One Identity Manager, user accounts can selectively inherit groups. To do this, groups and user accounts are divided into categories. The categories can be freely selected and are specified using a mapping rule. Each category is given a specific position within the template. The template contains two tables; the user account table and the group table. Use the user account table to specify categories for target system dependent user accounts. In the group table, enter your categories for the target system-dependent groups. Each table contains the category positions position 1 to position 63.
To define a category
-
In the Manager, select the host in the Unix > Hosts category.
-
Select the Change main data task.
-
Switch to the Mapping rule category tab.
-
Extend the relevant roots of the user account table or group table.
-
To enable the category, double-click 
.
-
Enter a category name of your choice for user accounts and groups in the login language that you use.
- Save the changes.
Detailed information about this topic
Editing the synchronization project for a Unix host
Synchronization projects in which a host is already used as a base object can also be opened in the Manager. You can, for example, check the configuration or view the synchronization log in this mode. The Synchronization Editor is not started with its full functionality. You cannot run certain functions, such as, running synchronization or simulation, starting the target system browser and others.
NOTE: The Manager is locked for editing throughout. To edit objects in the Manager, close the Synchronization Editor.
To open an existing synchronization project in the Synchronization Editor
-
In the Manager, select the Unix > Hosts category.
-
Select the host in the result list. Select the Change main data task.
-
Select the Edit synchronization project task.
Related topics
