Chat now with support
Chat with Support

Safeguard Authentication Services 4.1.5 - Management Console for Unix Administration Guide

One Identity Privileged Access Suite for Unix Introducing One Identity Management Console for Unix Installing Management Console for Unix Preparing Unix Hosts Working with Host Systems Managing Local Groups Managing Local Users Active Directory Integration Authentication Services Integration Privilege Manager Integration Reporting Setting Preferences Security Troubleshooting Tips
Auto Profile Issues Active Directory Issues Auditing and Compliance Cannot Create a Service Connection Point Check Authentication Services Agent Status Commands Not Available CSV or PDF Reports Do Not Open Database Port Number Is Already in Use Elevation Is Not Working Hosts Do Not Display Import File Lists Fakepath Information Does Not Display in the Console Java Applet Failures License Info in Report is not Accurate Out of Memory Error Post Install Configuration Fails on Unix or Mac Privilege Manager Feature Issues Profile Task Never Completes questusr Account was Deleted Readiness Check Failed Recovering From a Failed Upgrade Reports Are Slow Reset the Supervisor Password Running on a Windows 2008 R2 Domain Controller Service Account Login Fails Setting Custom Configuration Settings Single Sign-on (SSO) Issues JVM Memory Tuning Suggestions Start/Stop/Restart Management Console for Unix Service Tool Bar Buttons Are Not Enabled UID or GID Conflicts
System Maintenance Command Line Utilities Web Services Database Maintenance

Configure the Console for Active Directory Logon

The Setup Management Console for Unix wizard opens the Configure Console for Active Directory Logon dialog when you choose the Walk me through the configuration steps for using AD user accounts for logon to the console option.

To configure the mangement console for Active Directory logon

  1. On the Configure Console for Active Directory Logon dialog, enter a valid Active Directory domain in the forest, in the form example.com.

  2. Enter the credentials for an Active Directory account that has log-on rights.

    Enter a sAMAccountName, which uses the default domain or a User Principal Name, as in username@domain. The wizard uses these credentials to configure the mangement console for use with Active Directory.

    Note: This is a read-only operation; no changes are made to Active Directory.

  3. Click Connect to Active Directory.

  4. When you see the message that indicates the console connected to Active Directory successfully, click Next.

    The Set up console access by role dialog opens.

Setup Console Access by Role

After you Configure Console for Active Directory Logon, the setup wizard displays the Set up console access by role dialog.

To add Active Directory users or groups to the console access list

  1. On the Set up console access by role dialog, click Add... to specify the Active Directory users and groups that you want to have access to the features available in Management Console for Unix.
  2. On the Select Users and Groups dialog, use the search controls to find and select Active Directory user(s) or group(s). Select one or more objects from the list and click OK.

    The mangement console adds the selected object(s) to the list on the Set up console access by role dialog.

    By default the mangement console assigns users to All Roles, which gives those accounts permissions to access and perform all tasks within the console. (See Console Roles and Permissions System Settings for details.)

  3. Click in the Roles cell to activate a drop-down menu from which you can choose a role for the user account.

    Note: During the initial set up, you can only assign one role per user. Add additional roles to a user in System Settings. (See Add (or Remove) Role Members for details.)

  4. Click Next to save your selections.

    The Identify Console dialog opens.

Identify Console

The setup wizard displays the Identify Console dialog during the post-installation configuration steps. The Authentication Services Control Center uses this information to identify this mangement console. Hosts configured for automatic profiling and/or automatic QAS agent status also use this information to contact the mangement console server.

To identify the mangement console

  1. On the Identify Console dialog, modify the information about this mangement console, if necessary, and click Next to open the Set supervisor password dialog.

    Note: You can modify these settings from Settings | System settings | General | Console Information. (See Console Information Settings for details.)

Set Supervisor Password Dialog

The supervisor account is the default account for accessing all features of the mangement console. The supervisor is a member of all roles and no permissions can be removed from supervisor. However, the supervisor does not have Active Directory credentials and therefore is blocked from performing Active Directory tasks.

To set the supervisor password

  1. On the Set supervisor password dialog, enter a password for the supervisor account and click Next.

    The Summary dialog displays.

  2. To log on using the console supervisor account, use "supervisor" as the user name.

Note: The supervisor is the only account that has rights to change the supervisor account password in System Settings. (See Reset the Supervisor Password for details.)

Related Documents