Centrify DirectControl - Cerberis

More documents

Recommendations

Info

• • • • • •• The Centrify DirectControl Administrator Console andextensions for managing NIS maps in Active Directory.• The DirectAuthorize plug-in extension for managing theoperations users can perform on DirectControl-managedcomputers.• The Centrify DirectControl Administrative Templates forconfiguring UNIX group policies.• The Centrify DirectControl Administrator Console Help andother documentation.• The Centrify DirectControl API packaged in the dynamic linklibrary (DLL). The Centrify DirectControl API provides theCOM objects that convert Active Directory application objectsinto Centrify-enabled UNIX user, group, computer, and zoneobjects.• The Centrify Tools, including Centrify Zone Generator,Centrify Map Generator, and Centrify Zone Conversion.Step 2: Configure the default zoneWhen you start the Centrify DirectControl Administrator Consolefor the first time, the Setup Wizard is displayed to help youconfigure the Active Directory forest and the default properties foryour first Centrify DirectControl Zone. Zone properties areimportant because they allow you to control the default settings forusers and groups in the zone, greatly simplifying the task of addingnew UNIX users and groups to Active Directory.In addition, the Setup Wizard makes it easier for you to controlwhere Centrify DirectControl container objects should be placedand who will have permission to modify the objects within thosecontainers. Because the Centrify DirectControl Zone SetupWizard creates container objects, you may need to log on with anaccount that has Domain Administrator privileges. Thisrequirement depends on the specific permissions your organization40 Evaluation Guide
has configured for different classes of users. For example, if yourorganization only permits Domain Admins to create parent andchild objects in Active Directory, you should use a Domain Adminaccount to run the Setup Wizard. For information about thespecific rights required to perform tasks in the Setup Wizard, seethe Centrify DirectControl Administrator’s Guide.Understanding Zone TypesCentrify DirectControl enables you to create individual zones aseither container objects or as organizational units. For a productionenvironment, which of these to use is an important decision,especially if you plan to attach one or more Group Policy objects tothe organizational units you have defined in Active Directory,because you cannot create container objects inside of organizationalunits or link Group Policy Objects to container objects. However,in this evaluation, you will apply group policies at the domain level(see Chapter 7, “Using group policies for UNIX users andcomputers”), not at an OU-level, so you can accept the default,which is to create zones as container objects. See the CentrifyDirectControl Planning and Deployment Guide for information aboutintegrating zones into your organizational structure and usinggroup policies at a finer level of granularity.Running the Setup WizardNote Although you can skip some initial configuration steps,Centrify recommends you complete all of the configuration steps,including those that set up the default zone, before you beginattempting to add computers to the domain. For more informationabout any configuration step, see the Centrify DirectControlAdministrator’s Guide.To start the Setup Wizard and update the Active Directory forest:1 Open the Centrify DirectControl Administrator Console.Chapter 3 • Installing Centrify DirectControl 41
Page 1 and 2: Centrify DirectControlEvaluation Gu
Page 6 and 7: • • • • • •Chapter 10 U
Page 9: • Chapter 4, “Using UNIX authen
Page 12 and 13: • • • • • • Where to go
Page 14 and 15: • • • • • • Contacting
Page 16 and 17: • • • • • • What can Ce
Page 18 and 19: • • • • • • How does Ce
Page 20 and 21: • • • • • • How does Ce
Page 22: • • • • • • Understandi
Page 25 and 26: Chapter 2Setting up the evaluation
Page 27 and 28: Checking Windows requirementsBefore
Page 29 and 30: • IBM AIX• Mac OS X• Oracle E
Page 31 and 32: Active Directory domain. For exampl
Page 33 and 34: Checking the DNS environmentCentrif
Page 35 and 36: In addition, because the virtual en
Page 37 and 38: Summary of the evaluation environme
Page 39 and 40: Chapter 3Installing Centrify Direct
Page 41: 3 Click the appropriate Administrat
Page 45 and 46: 6 Select Install 30 day evaluation
Page 47 and 48: mechanism for a computer’s local
Page 49 and 50: want to evaluate how it works, or t
Page 51 and 52: For more information about the opti
Page 53 and 54: To check and disable, if necessary,
Page 55 and 56: eadiness of your machine to join th
Page 57 and 58: Chapter 4Using UNIX authentication
Page 59 and 60: 8 The Properties dialog box shows t
Page 61 and 62: Browse and type “hr” to display
Page 63 and 64: 1 Create another new user account i
Page 65 and 66: 4 Check the UNIX UID and GID assign
Page 67 and 68: Note This test does not work if the
Page 69 and 70: You can enforce any and all of thes
Page 71 and 72: 10 Run the adinfo command to see de
Page 73 and 74: Chapter 5Administering zonesAs disc
Page 75 and 76: Creating new zonesWhen you start th
Page 77 and 78: 11 Click Browse to enter search cri
Page 79 and 80: 5 Verify or change any of the defau
Page 81 and 82: administration of a zone to an indi
Page 83 and 84: 1 Grant permission to John Smith to
Page 85 and 86: Using the DirectControl Web Console
Page 87 and 88: files (C:\Program Files\centrify\Di
Page 89 and 90: 3 Select the zones to display and c
Page 91 and 92: Adding Active Directory users and g
Page 93 and 94:
attributes, including UNX name, UID
Page 95 and 96:
Chapter 7Using group policies for U
Page 97 and 98:
• The Group Policy Object Editor
Page 99 and 100:
You should see the new login banner
Page 101 and 102:
1 Log in as an administrator on a W
Page 103 and 104:
Chapter 8Defining rights and rolesT
Page 105 and 106:
Getting started evaluating DirectAu
Page 107 and 108:
DirectControl. However, you must in
Page 109 and 110:
If you expand DZTest, you see nodes
Page 111 and 112:
4 In the console tree, select and e
Page 113 and 114:
12 Click the Commands Access tab, s
Page 115 and 116:
[suser]$adflushError: adflush may o
Page 117 and 118:
6 Click New.7 Enter the following c
Page 119 and 120:
• Description: Can execute ls, ca
Page 121 and 122:
As a quick sanity check for this ev
Page 123 and 124:
• Contract will start at the begi
Page 125 and 126:
8 Enter the following commands and
Page 127 and 128:
2 SSH to the machine using the logi
Page 129 and 130:
3 Select a user, for example, Sally
Page 131 and 132:
formats, or print them. See the Cen
Page 133 and 134:
Chapter 9Managing NIS maps in Activ
Page 135 and 136:
Creating and importing NIS maps in
Page 137 and 138:
Testing adnisdby typing the appropr
Page 139 and 140:
Chapter 10Using DirectControl with
Page 141 and 142:
authentication instead of Kerberos
Page 143 and 144:
DirectControl Agent in Centrify Dir
Page 145 and 146:
[global]security = ADSrealm = examp
Page 147 and 148:
Testing Samba on UNIXUse the follow
Page 149 and 150:
as Samba-CDC (hostname).3 Open the
Page 151 and 152:
Chapter 11Using DirectControl with
Page 153 and 154:
Setting up SSHAll configuration of
Page 155 and 156:
Working with DirectControl reportsC
Page 157 and 158:
perform additional tasks. For examp
Page 159 and 160:
Click Apply to group by the new cri
Page 161 and 162:
However, later on in the wizard you
Page 163 and 164:
Chapter 13Completing the evaluation
Page 165 and 166:
Item Description Significance Direc
Page 167 and 168:
Page 169 and 170:
Page 171 and 172:
• • • • • •IndexAaccess
Page 173 and 174:
creating maps 133importing maps 133
show all

Centrify DirectControl - Cerberis

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?