Installing and publishing the Web Interface extensions adds a number of pages and commands to theActive Roles Web Interface, enabling the management of UNIX-specific information in Active Directory.
These pages and commands include:
To publish Web Interface extensions
-
Start the ActiveRoles Server Web Interface.
-
Start Google Chrome or Mozilla Firefox.
-
Navigate to the following URL:
http://<IP Address>/ARWebAdmin
-
At the login screen, enter your user name and password.
-
From the Customization menu on the main page of the ActiveRoles Server Web Interface, choose the Reload option.
NOTE: If you do not see the Customization link on the ActiveRoles Server Web Interface on Windows 2008 R2, run the browser with elevated privileges.
You can manage the UNIX-specific information for a Windows user account in the Active Roles Web Interface.
To UNIX-enable a user
-
On the home page of the ActiveRoles Server, click the Directory Management link.
-
In the Active Roles directory tree, navigate to Active Directory and select the Users folder under your managed domain.
-
In the details pane, click a user name link.
-
From the drop-down, select UNIX Properties.
-
On the UNIX Account tab, select the UNIX Enabled option.
-
Modify any of the UNIX-related properties.
The UID Number is the unique identifier for a UNIX user. Ideally, each Windows user is assigned a unique UID number. By default the Integration Pack generates a unique ID automatically. If you change the User ID, the Integration Pack checks to ensure the specified value is unique among UNIX-enabled users.
NOTE: The Primary Group box displays the Domain Name of the group corresponding to the Primary Group ID. You can click Change to browse UNIX-enabled groups to find the Primary Group by name.
-
To commit your changes, click Save.
You can use ActiveRoles Server to UNIX-disable users.
To UNIX-disable a user
-
On the home page of ActiveRoles Server, click the Directory Management link.
-
In the Active Roles directory tree, navigate to Active Directory and select the Users folder under your managed domain.
-
In the details pane, click a user name link.
-
From the drop-down, select UNIX Properties.
-
On the UNIX Account tab, clear the UNIX Enabled option.
-
To commit your changes, click Save.
UNIX-disabling a user changes their login shell to bin/false.
After you UNIX-disable a user, you may want to clear that user's UNIX attributes.
To clear UNIX attributes
-
Click the Directory Management link on the home page of ActiveRoles Server.
-
From the ActiveRoles Server directory tree, navigate to Active Directory and select the Users folder under your managed domain.
-
In the details pane, click a user name link.
-
From the drop-down menu, select UNIX Properties.
-
Clear the text of each UNIX-related property and click Save.
NOTE: When you click Save, if there is a UNIX property in any of the fields, the Integration Pack makes no changes to the user's UNIX properties.
