Policies
Use standard ActiveRoles Server functionality to provide Unix data management policies. You can create custom policy objects based on the policy types provided to allow for automated Unix account provisioning and de-provisioning.
To locate the Policy Types provided by the Integration Pack, in the ActiveRoles Server Console, navigate to Configuration | Server Configuration | Policy Types | Safeguard Authentication Services Integration v2.6.x.
The following table summarizes the Policy Types included with the Integration Pack.
Table 3: Policy types included with the integration pack
|
Deprovision Unix Group |
Enables automatic de-provisioning of Unix attributes when group objects are de-provisioned. |
|
Deprovision Unix User |
Enables automatic de-provisioning of Unix attributes when users are de-provisioned. |
|
Provision Unix Group |
Enables automatic provisioning of Unix attributes when new group objects are provisioned. |
|
Provision Unix User |
Enables automatic provisioning of Unix attributes when new user objects are provisioned |
Refer to Administration Tasks for procedures on how to enable automatic provisioning and de-provisioning of Unix account attributes for users and groups.
Web Interface Extensions
The integration pack extends the ActiveRoles Server Web interface to include pages and commands that allow you to perform management tasks.
Tasks specific to Unix user accounts:
- Enable or disable Unix account
- View or modify Unix account properties
- Clear all Unix attributes
Tasks specific to Unix groups:
- Enable or disable Unix group
- View or modify Unix properties
- Clear all Unix attributes
The Integration Pack uses Access Templates to delegate these tasks.
NOTE: The Integration Pack installation process configures the Web interface extensions. To remove the Web interface extensions after the Integration Pack is installed and functioning, click Customization | Restore in the Web interface. To regain the Web interface extension functionality, run the ActiveRoles Integration Configuration Wizard from the Start menu.
Deploying the Integration Pack
Deploying the Integration Pack
The Integration Pack consists of a single Windows.msi installer. This installer checks that the necessary prerequisite software is installed on the local machine before it installs the Integration Pack.
There are two steps to deploying the Integration Pack:
- Install the Integration Pack configuration modules and Web Interface extensions.
- Configure ActiveRoles Server.
Installation
To install the Authentication Services ActiveRoles Integration
- Click arsqas-2.6.x.msi file to start the InstallShield Wizard.
- At the Welcome page, click Next.
- At the Licence Agreement page, accept the terms in the license and click Next.
- At the Ready to Install page, click Install.
- When the InstallShield Wizard completes, leave the Launch setup wizard option selected and click Finish.
Wait while the ActiveRoles Integration Configuration Wizard starts.
-
Select the ActiveRoles Server web sites that you want to extend for Safeguard Authentication Services and click Continue.
NOTE: You can manage your ActiveRoles Server web sites using standard ActiveRoles Server functionality. From the Start menu, navigate to All Programs | Quest Software | Safeguard Authentication Services ActiveRoles Integration | ActiveRoles Integration Configuration Wizard to start the wizard which will help you configure web sites including newly created web sites for the ActiveRoles Server web interface.
NOTE: Every time you create and configure a new web site for the ActiveRoles Server Web Interface, you must run the ActiveRoles Integration Configuration Wizard.
- When the configuration setup wizard completes, click Restart ActiveRoles Now.
-
When it becomes active, click the Close button and wait for a minute while ActiveRoles Server loads the startup information.
NOTE: Once the service restarts, wait a few minutes before you open the ActiveRoles Server console.
- There are two ways to start the ActiveRoles Server Console:
- From the Start menu, navigate to All Programs | Quest Software | ActiveRoles Server | ActiveRoles Server Console.
-OR-
- You can also access the ActiveRoles Server Console from the Safeguard Authentication Services Control Center. Navigate to Start | All Programs | Quest Software | Quest Safeguard Authentication Services | Safeguard Authentication Services Control Center.
Once the console is open, look for the Safeguard Authentication Services Integration Pack v2.6.x folder under these nodes:
- Access Templates
- Managed Units
- Policies | Administration
- Script Modules
- Server Configuration | Policy Types
- Applications
