Safeguard Authentication Services 4.1.5 - Upgrade Guide

Add a local group

You can use the mangement console to remotely add a local group to the host.

To add a local group to the host

1. From the Management Console for Unix Host tab's All Hosts view, double-click a host name to open its properties.
2. Select the Groups tab and click Add Group.
3. In the Add New Group dialog, enter localgroup as a local group name in the Group Name box and click Add Group.
4. In the Log on to Host dialog, enter your credentials and click OK.

   Note: This task requires elevated credentials. Credential information is entered by default from the cache.

   The new local group account is added to the system and mangement console.

Add local user account

To add a local user account

1. From the All Hosts view, double-click a host name to open its properties.
2. Select the Users tab from the host properties and click Add User.
3. In the Add New User dialog,
   1. Enter localuser as a new local user name in the Name box.
   2. Click Select Group browse button next to the GID box, to find and select the local group account you set up in Add a local group.

      You can also the navigation buttons at the bottom of the list to find and select a group.

   3. Click the Select Shell browse button to find and select a local login shell.
   4. Enter and re-enter a password of your choice and click Add User to add this new local user.
4. On the Log on to Host dialog, enter your credentials to log onto the host and click OK.

   Note: This task requires elevated credentials. The mangement console enters this information by default from the cache.

   The new local user account is added to the system and mangement console.

At this point the new local user is valid for local authentication with the password you just set.

Add an Active Directory group account

Authentication Services provides additional tools to help you manage different aspects of migrating Unix hosts into an Active Directory environment. Links to these tools are available from Tools in the Control Center.

To create a new group in Active Directory

1. In the Control Center, navigate to Tools and click the link for Authentication Services Extensions for Active Directory Users and Computers.

   The Active Directory Users and Computers Console opens.

   Note: Windows Vista/Windows 7: You must have the Remote Server Administration Tools installed and enabled. Windows2003/Windows XP: You must have the Windows 2003 Server Administration Tools installed.

2. Expand the domain folder and select the Users folder.
3. Click the New Group icon button.

   The New Object - Group dialog opens.

4. Enter UNIXusers in the Group name box and click OK.

Add an Active Directory user account

To create an Active Directory user account

1. In the Active Directory Users and Computers console, select the Users folder and click the New User icon button.
2. On the New Object - User dialog, enter information to define a new user named ADuser and click Next.

   The New Object - User wizard guides you through the user setup process.

3. When you enter a password, clear the User must change password at next logon option, before you click Next.
4. Click Finish.
5. Close Active Directory Users and Computers and return to the mangement console.