立即与支持人员聊天
与支持团队交流

Safeguard Authentication Services 6.0 LTS - Upgrade Guide

Privileged Access Suite for UNIX Introducing One Identity Safeguard Authentication Services Upgrade Windows components Configure Active Directory Configure UNIX agent components Upgrade client components manually Getting started with Safeguard Authentication Services Troubleshooting

Adding licenses using the Control Center

To add licenses using the Control Center

  1. Open the Control Center and click Preferences on the left navigation pane.

  2. Expand the Licensing section. The list box displays all licenses currently installed in Active Directory. You can click to see the detail information for a license and copy the information, if needed.

  3. Under Options, select Add a license.

  4. Browse for one or more license files and click Open. The license appears in the list box.

    If the license is not valid, a message like the following displays: Failed to add license. The license file specified is not a valid license. The license number, the product, the reason for the failure (such as not vlaid or duplicate), and the path where the license file resides is shown.

    NOTE: UNIX hosts check for new licenses when the host is joined to the domain or every 24 hours by default. This can be changed by modifying the configuration-refresh-interval setting in vas.conf.

To remove a license, select the license and click Remove license.

To restore a removed license, click Undo Remove.

Display specifiers

Display specifiers are Active Directory objects that provide information about how other objects in the directory display in client applications.

NOTE: The Register Display Specifiers link is only displayed in the Control Center when display specifiers are not already registered with Active Directory. If the display specifiers are registered, Control Center does not display the link.

Registering display specifiers

Because it is common to use the Find dialog in ADUC to manage users and groups, One Identity recommends that you register display specifiers with Active Directory. Registering display specifiers provides the following benefits:

  • UNIX Account properties appear in ADUC Find dialog results.

  • UNIX Personality objects are displayed correctly in ADUC. This only applies if the UNIX Personality schema has been installed.

NOTE: You must have Enterprise Administrator rights to register display specifiers.

You can inspect exactly which changes are made during the display specifier registration process by viewing the DsReg.vbs script found in the Safeguard Authentication Services installation directory. You can use this script to unregister display specifiers at a later time.

To register display specifiers with Active Directory

  1. From a Windows management workstation with Safeguard Authentication Services installed, navigate to Start > Quest Software > Safeguard Authentication Services > Control Center.

  2. Click Preferences on the left navigation panel.

  3. Expand the Display Specifiers section.

    NOTE: The Register Display Specifiers link is only displayed in the Control Center when display specifiers are not already registered with Active Directory. If the display specifiers are registered, Control Center does not display the link.

  4. Click the Register Display Specifiers link to register display specifiers with Active Directory.

    While it is registering the display specifiers with Active Directory, Control Center displays a progress indicator. When the process is complete, Control Center indicates that display specifiers are registered.

    Alternatively, you can register display specifiers from the command line, as follows:

    1. Log in as a user with Enterprise Administrator rights.

    2. Open a command prompt, navigate to the Safeguard Authentication Services installation directory, and run this command:

      DsReg.vbs /add

    NOTE: To register One Identity Active Directory display specifiers with One Identity Active Directory, navigate to the installed location for Safeguard Authentication Services and run the following command:

    DsReg.vbs /add /provider:EDMS

    You must install the One Identity Active Directory management package locally or DsReg.vbs returns an "Invalid Syntax" error.

    To see all the DsReg.vbs options, run the following command:

    DsReg.vbs /help

Unregistering display specifiers

NOTE: You must have Enterprise Administrator rights to unregister display specifiers.

To unregister display specifiers in Active Directory

  1. Log in as a user with Enterprise Administrator rights.

  2. Open a command prompt and navigate to the Safeguard Authentication Services installation directory.

  3. Run the DsReg.vbs script with the /remove option:

    DsReg.vbs /remove

    NOTE: To unregister display specifiers with One Identity Active Roles, run the following command:

    DsReg.vbs /remove /provider:EDMS

    To see all the DsReg.vbs options, run the following command:

    DsReg.vbs /help

    A SUCCESS message appears indicating that the display specifiers were removed successfully.

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级