One Identity Privileged Access Suite for Unix
Installation
Authentication Services Mac OS X agent installation
The Authentication Services Mac OS X components
Install Authentication Services using the graphical system installer
Install Authentication Services with the system installer
Custom install
Command line install
Authentication Services agent upgrade
Authentication Services Mac OS X agent removal
Authentication Services startup items
Authentication Services directory service plugin
Authentication Services directory utility
Authentication Services security server plugin
Configuring the Authentication Services client
Launch the directory utility application
Configure the Authentication Services node
Adding, checking, and verifying Authentication Services licenses
Joining the Active Directory domain
Special Mac OS X features
Graphically join the domain
Unjoin an Active Directory domain
Command line join
Using Terminal.app to join and unjoin
System changes made by the join process
Verify the installation and configuration
Logging in with Active Directory accounts
Troubleshooting connections to Windows SMB shares
Automatically mount network home folders
Local Administrator rights for Authentication Services users
Active Directory user password hint
Configuring Apple FileVault disk encryption
Authentication Services limitations on Mac OS X
Authentication Services Group Policy for Mac OS X
Profile-based policy
Certificate Autoenrollment
Mac OS X management modes
Workgroup Manager settings
Applications properties
Classic properties
Dock properties
Energy Saver properties
Finder properties
Login properties
Media Access properties
Network properties
Parental Controls properties
Printing properties
Software Update properties
System Preferences properties
Time Machine properties
Universal Access properties
Wireless User Profile properties
Preference Manifest settings
Certificate Autoenrollment on Mac OS X/macOS
Certificate Autoenrollment requirements and setup
Java requirement: Unlimited Strength Jurisdiction Policy Files
Installing certificate enrollment web services
Configuring Certificate Services Client - Certificate Enrollment Policy
Configuring Certificate Services Client - Auto-Enrollment Group Policy
Configuring Certificate Templates for Auto-enrollment
Using Certificate Autoenrollment
Troubleshooting Certificate Auto-Enrollment
Command line tool
Install the Authentication Services metapackage from command line
Installation > Authentication Services Mac OS X agent installation > Command line install > Install the Authentication Services metapackage from command line
To install all of the Authentication Services packages found in the Authentication Services metapackage
- Open a Terminal.app window and execute the following commands
- Change directories to the location where you mounted the Authentication Services.dmg:
$ cd /Volumes/VAS-Installer
- Execute the command line installer with the following arguments:
$ sudo /usr/sbin/installer -pkg VAS.mpkg -target /
This installs all of the Authentication Services packages contained in the Authentication Services metapackage.
- Run the following command to install individual Authentication Services components.
$ cd /Volumes/VAS-Installer/VAS.mpkg/Contents $ sudo /usr/sbin/installer -pkg Packages/vasclnt.pkg \ -target /
|
|
Note: You must install all Authentication Services components into the root file system, so the parameter to the target command line option must be /. Also, you must have local administrator rights to run commands using the sudo utility. |
Install a single Authentication Services package from command line
Installation > Authentication Services Mac OS X agent installation > Command line install > Install a single Authentication Services package from command line
To install a single Authentication Services package from command line
- Change directories to the location where you mounted the Authentication Services agent .dmg:
$ cd /Volumes/VAS-Installer/VAS.mpkg/Contents
- Execute the following command to install the Authentication Services core components:
$ sudo /usr/sbin/installer -pkg Packages/vasclnt.pkg \-target /
- Execute the following command to install the Group Policy components:
$ sudo /usr/sbin/installer -pkg Packages/vasgp.pkg \-target /
Mount and unmount the Authentication Services.dmg from the command line
Installation > Authentication Services Mac OS X agent installation > Command line install > Mount and unmount the Authentication Services.dmg from the command line
To mount and unmount the Authentication Services .dmg from the command line
- Mount the Authentication Services agent .dmg from the command line and run the following command:
hdiutil attach /<path_to_dmg>/VAS-<version>.<build number>.dmg
The .dmg contents mounts on your system, under
/Volumes/VAS-Installer
- To unmount the Authentication Services agent .dmg from the command line, run the following command:
hdiutil detach /Volumes/VAS-Installer
Authentication Services agent upgrade
To upgrade Authentication Services, simply follow the normal installation steps for both the GUI process and the command line process. The Authentication Services installation scripts detect when an upgrade is being performed and automatically perform the proper steps to upgrade versions.