Safeguard Authentication Services 4.1.5 - ActiveRoles Integration Pack Administration Guide

Unix-Enable a Group

You can manage the Unix-specific information for a Windows user account from the ActiveRoles Server web interface.

To Unix-enable a group

1. Click the Directory Management link on the home page of the ActiveRoles Server.
2. From the ActiveRoles Server directory tree, navigate to Active Directory and select the Users folder under your managed domain.
3. In the details pane, click a group name link.
4. From the drop-down menu, select Unix Properties.
5. On the Unix Account tab, select the Unix Enabled option.
6. Modify any of the Unix-related properties.

   The GID Number is the unique identifier for a Unix group. Ideally, each Windows group is assigned a unique Group ID number. By default the Integration Pack generates a unique ID automatically. If you change the GID Number, the Integration Pack checks to ensure the specified value is unique among Unix-enabled groups.

7. Click Save to commit your changes.

Unix-Disable a Group

To Unix-disable a group

1. Click the Directory Management link on the home page of the ActiveRoles Server.
2. From the ActiveRoles Server directory tree, navigate to Active Directory and select the Users folder under your managed domain.
3. In the details pane, click a group name link.
4. From the drop-down menu, select Unix Properties.
5. On the Unix Account tab, deselect the Unix Enabled option.
6. Click Save to commit your changes.

Unix-disabling a group clears the GID.

Troubleshooting

To help you troubleshoot, One Identity recommends the following resolutions to some of the common problems you might encounter as you deploy and use the Authentication Services ActiveRoles Integration Pack .

No Application Configuration Found for Authentication Services

The Integration Pack must have an Authentication Services Application Configuration available for each managed forest. During the Authentication Services Integration Setup for ActiveRoles Server, if you do not have an application configuration in list of domains, the ActiveRoles Integration Configuration Wizard displays an error message that says, "No Application Configuration Found for Authentication Services".

To make the Authentication Services Application Configuration available to the Integration Pack

1. Using standard ActiveRoles Server functionality, add the Active Directory domain in which the Authentication Services Application Configuration resides to the list of domains managed by ActiveRoles Server.

   -OR-

2. Delete the Authentication Services Application Configuration from its current location and re-create it in the domain where ActiveRoles Server resides.