Centrify DirectControl Best Practices - Cerberis

CENTRIFY WHITE PAPERCENTRALIZED MANAGEMENT FOR UNIX, LINUX, MAC AND JAVA WITH ACTIVE DIRECTORY AND DIRECTCONTROL1.3.2 Current IT ArchitectureFigure 1-1This figure illustrates the logical architecture in use at Illumi Clinics. Specifically, thisillustrates the state before deploying Centrify DirectControl.• The Active Directory server is a fully redundant cluster running on Windows Server2003 Enterprise Edition R2.• The UNIX servers / workstations include HP-UX 11.23, Sun Solaris 9 and 10 andRed Hat Enterprise Linux 3 and 4 computers.• There is a local ntpd running on each UNIX computer.• Active Directory and all UNIX computers use the same primary timeserver.• All UNIX and Windows computers are registered with the Windows 2003 DNSservice.• A commercial software management package is used for deploying patches and newsoftware to Windows and UNIX clients.• The UNIX syslog is monitored with a commercial log-monitoring package.• Starting with Windows NT 3.1 for the DEC Alpha, Illumi Clinics standard has beenthe Windows user name and UNIX user name must match. All users “Pre-Windows2000 username” attribute value in Active Directory is equivalent to their 8 characterUNIX username.• The UNIX operations team shares the root password.© CENTRIFY CORPORATION 2004-2007. ALL RIGHTS RESERVED. PAGE 4