Safeguard Authentication Services 4.1.5 - ActiveRoles Integration Pack Administration Guide

Policies

Use standard ActiveRoles Server functionality to provide Unix data management policies. You can create custom policy objects based on the policy types provided to allow for automated Unix account provisioning and de-provisioning.

To locate the Policy Types provided by the Integration Pack, in the ActiveRoles Server Console, navigate to Configuration | Server Configuration | Policy Types | Authentication Services Integration v2.1.x.

The following table summarizes the Policy Types included with the Integration Pack.

Refer to Administration Tasks for procedures on how to enable automatic provisioning and de-provisioning of Unix account attributes for users and groups.

Web Interface Extensions

The integration pack extends the ActiveRoles Server Web interface to include pages and commands that allow you to perform management tasks.

Tasks specific to Unix user accounts:

• Enable or disable Unix account
• View or modify Unix account properties
• Clear all Unix attributes

Tasks specific to Unix groups:

• Enable or disable Unix group
• View or modify Unix properties
• Clear all Unix attributes

The Integration Pack uses Access Templates to delegate these tasks.

Deploying the Integration Pack

The Integration Pack consists of a single Windows .msi installer. This installer checks that the necessary prerequisite software is installed on the local machine before it installs the Integration Pack.

There are two steps to deploying the Integration Pack:

1. Install the Integration Pack configuration modules and Web Interface extensions.
2. Configure ActiveRoles Server.

Installation

To install the Authentication Services ActiveRoles Integration

1. Click arsqas-2.1.x.msi file to start the InstallShield Wizard.
2. At the Welcome page, click Next.
3. At the Licence Agreement page, accept the terms in the license and click Next.
4. At the Ready to Install page, click Install.
5. When the InstallShield Wizard completes, leave the Launch setup wizard option selected and click Finish.

   Wait while the ActiveRoles Integration Configuration Wizard starts.

6. Select the ActiveRoles Server web sites that you want to extend for Authentication Services and click Continue.

   NOTE: You can manage your ActiveRoles Server web sites using standard ActiveRoles Server functionality. From the Start menu, navigate to All Programs | Quest Software | Authentication Services ActiveRoles Integration | ActiveRoles Integration Configuration Wizard to start the wizard which will help you configure web sites including newly created web sites for the ActiveRoles Server web interface.

   NOTE: Every time you create and configure a new web site for the ActiveRoles Server Web Interface, you must run the ActiveRoles Integration Configuration Wizard.

7. When the configuration setup wizard completes, click Restart ActiveRoles Now.

8. When it becomes active, click the Close button and wait for a minute while ActiveRoles Server loads the startup information.

   NOTE: Once the service restarts, wait a few minutes before you open the ActiveRoles Server console.

9. There are two ways to start the ActiveRoles Server Console:
   1. From the Start menu, navigate to All Programs | Quest Software | ActiveRoles Server | ActiveRoles Server Console.

      -OR-

   2. You can also access the ActiveRoles Server Console from the Authentication Services Control Center. Navigate to Start | All Programs | Quest Software | Quest Authentication Services | Authentication Services Control Center.

Once the console is open, look for the Authentication Services Integration Pack v2.1.x folder under these nodes:

• Access Templates
• Managed Units
• Policies | Administration
• Script Modules
• Server Configuration | Policy Types
• Applications