Chat now with support
Chat with Support

One Identity Management Console for Unix 2.5.2 - Administration Guide

One Identity Privileged Access Suite for Unix Introducing One Identity Management Console for Unix Installing Management Console for Unix Preparing Unix hosts Working with host systems Managing local groups Managing local users Active Directory integration Authentication Services integration Privilege Manager integration
Getting started Configure a primary policy server Configure a secondary policy server Install PM agent or Sudo plugin on a remote host Security policy management
Opening a policy file Edit panel commands Editing PM policy files Reviewing the Access and Privileges by User report Reviewing the Access and Privileges by Host report
Event logs and keystroke logging
Reporting Setting preferences
User preferences System preferences
Security Troubleshooting tips
Auto profiling issues Active Directory Issues Auditing and compliance Cannot create a service connection point Check Authentication Services agent status commands not available CSV or PDF reports do not open Database port number is already in use Elevation is not working Hosts do not display Import file lists fakepath Information does not display in the console License information in report is not accurate Out of memory error Post install configuration fails on Unix or Mac Privilege Manager feature issues Profile task never completes questusr account was deleted Readiness check failed Recovering from a failed upgrade Reports are slow Reset the supervisor password Running on a Windows 2008 R2 domain controller Service account login fails Setting custom configuration settings Single Sign-on (SSO) issues JVM memory tuning suggestions Start/stop/restart Management Console for Unix service Toolbar buttons are not enabled UID or GID conflicts
System maintenance Command line utilities Web services Database maintenance About us

View a group’s membership

To view what users are a member of a group

Powershell:

Get-QmcuComputer -ComputerName test.example.com | Get-QmcuGroupMember -Groupname localgroup

Unix CLI:

get-qmcucomputer -c test.example.com | get-qmcugroupmember -n localgroup

Web services

Management Console for Unix's Web Services interface allows you to integrate the Management Console for Unix database with other solutions that provide management or administrative capabilities, such as HR systems. For example, you can use these development tools to enable One Identity Access Manager to make web service calls containing an Active Directory user identifier to

retrieve information from the mangement console database about the local Unix accounts for this user.

This appendix documents how to access and authenticate to the Management Console for Unix Web Services interface.

Note: Web Service calls will fail with a ProtocolException ((412) Precondition Failed) error if you have not completed the mangement console post-installation configuration. See Setting up Management Console for Unix for details.

Accessing the web services

To access the Management Console for Unix web services

  1. Open an Internet Explorer web browser window and navigate to:

    https://<localhost>:9443/webservices

    where <localhost> is the name or IP address of the host on which the mangement console is installed.

    The Web Services interface displays a list of available SOAP services and provides links to the Computers, Credentials, Groups, and Users WSDLs.

  2. Click a WSDL link to open the associated usage documentation.

Web services

Management Console for Unix provides the following Web services:

Note: Your "endpoint address" value as shown in the table below will be relevant to your installation. For example, replace <localhost:9443> with the name or IP address, and port of the host on which your mangement console is installed.

Table 88: Web services
Web Service Description

ComputersService

 
  • AddNewGroup
  • RemoveGroup
  • GetRemoveGroupStatus
  • GetQasProfile
  • GetRemoveUserStatus
  • GetAddNewGroupStatus
  • GetNextAvailableUID
  • Get
  • GetAddNewUserStatus
  • GetByName
  • NOOP
  • GetAll
  • RemoveUser
  • GetGroups
  • GetProfileStatus
  • Remove
  • AddNewUser
  • Find
  • GetNextAvailableGID
  • GetUsers
  • Add
  • Profile

Endpoint address: https://<localhost:9443>/webservices/Computers/2010/08

WSDL: {http://webservices.mcu.quest.com/Computers/2010/08/} ComputersService

Target namespace: http://webservices.mcu.quest.com/Computers/2010/08/

CredentialsService

 
  • NOOP
  • HasCached
  • RemoveCached
  • Cache

Endpoint address: https://<localhost:9443>/webservices/Credentials/2010/08

WSDL: {http://webservices.mcu.quest.com/Credentials/2010/08/} CredentialsService

Target namespace: http://webservices.mcu.quest.com/Credentials/2010/08/

GroupsService

 
  • AddMembers
  • GetUpdateStatus
  • GetRemoveMembersStatus
  • RemoveMembers
  • NOOP
  • Update
  • GetMembers
  • Find
  • GetAddMembersStatus

Endpoint address: https://<localhost:9443>/webservices/Groups/2010/08

WSDL: {http://webservices.mcu.quest.com/Groups/2010/08/} GroupsService

Target namespace: http://webservices.mcu.quest.com/Groups/2010/08/

UsersService

 
  • SetPassword
  • GetGroups
  • Find
  • NOOP
  • RemoveGroups
  • GetRemoveGroupsStatus
  • Update
  • GetAddGroupsStatus
  • AddGroups
  • GetSetPasswordStatus
  • GetUpdateStatus

Endpoint address: https://<localhost:9443>/webservices/Users/2010/08

WSDL: {http://webservices.mcu.quest.com/Users/2010/08/} UsersService

Target namespace: http://webservices.mcu.quest.com/Users/2010/08/

Related Documents