Chat now with support
Chat with Support

Safeguard Authentication Services 4.1.5 - Administration Guide

One Identity Privileged Access Suite for Unix Introducing One Identity Authentication Services Unix administration and configuration Identity management Migrating from NIS Managing access control Managing local file permissions Certificate Autoenrollment Integrating with other applications Managing Unix hosts with Group Policy
Authentication Services Group Policy
Group Policy Concepts Unix policies One Identity policies
Integrating with GPMC
Display specifiers Troubleshooting

Group Map file

The Group map file contains mappings between Active Directory and local groups. It is produced by oat_match and is passed to oat_changeowners to align file ownership.

Syntax
<group_map> ::= `#!group` { <CRLF> <map_entry> }
<map_entry> ::= <unix_entry_value> { <white_space> } <ad_entry_value>
<ad_entry_value> ::= <entry_value>
<unix_entry_value> ::= <entry_value>
<entry_value> ::= <identifier> '(' [ <group_name> ] ')'
<identifier> ::= <digit> { <digit> }
<group_name> ::= <character> { <character> }
Sample
#!group
1002(grp1) 1001(grp1)

Local User Override file

The User Local Override file contains information about mappings between Active Directory and local users. It is produced by oat_match and is used by Authentication Services to override properties of Active Directory users on the local host.

Syntax
<user_local_override_list> ::= { <user_local_override_record> <CRLF> }
<user_local_override_record> ::= <AD_user> ':' <local_user>
<AD_user> ::= <UPN>
<local_user> ::= <Login Name> ':' [<UID>] ':' [<GID>] ':' [<GECOS>] ':' [<Home Directory>] ':' [<Shell>]
<UPN> ::= <character> {<character>} '@' <character> {<character>}
<Login Name> ::= <character> {<character>}
<UID> ::= <digit> { <digit> }
<GID> ::= <digit> { <digit> }
<GECOS> ::= <character> {<character>}
<Home Directory> ::= <character> {<character>}
<Shell> ::= <character> {<character>}
Sample
vanya@a.vmx:testmigr:1001:1001::/home/testmigr:
alex@a.vmx:alex:500:500::/home/alex:
mpetrova@a.vmx:masha:10003:0:Maria Petrova::

Local Group Override file

The Group Local Override file contains information about mappings between Active Directory and local groups. It is produced by oat_match and is used by Authentication Services to override properties of Active Directory users on the local host.

Syntax
<group_local_override_list> ::= { <group_local_override_record> <CRLF> }
<group_local_override_record> ::= <AD_group> ':' <local_group>
<AD_group> ::= <Group Name>
<local_group> ::= <Override Group Name> ':' <GID> ':' [<Additional Members>]
<Group Name> ::= <character> {<character>}
<Override Group Name> ::= <character> {<character>}
<GID> ::= <digit> { <digit> }
<Additional Members> ::= <User name> { ',' <User name> }
<User name> ::= <character> {<character>}
Sample
spartak:spartak:1002:

Files to Process List file

The Files to Process List file contains a list of files and directories for which you want to change the ownership. It is produced by X? and is passed to oat_changeowners.

Syntax
<file_list> ::= { < file_list_entry > <CRLF> }
<file_list_entry> ::= <full_file_name> | <full_directory_name>
<full_file_name> ::= '/' { <character> }
<full_directory_name> ::= '/' { <character> }
Sample
/home/alex
/home/mike
/etc
/opt/quest/bin/vastool
Related Documents