Centrify DirectControl - Cerberis

More documents

Recommendations

Info

• • • • • •For example, to install on a Linux or UNIX computer from theCentrify DirectControl CD, change to the unix directory:cd UnixSimilarly, if you are installing on a Mac OS X computer, changeto the MacOS directory.4 Run the install.sh script to start the installation of CentrifyDirectControl on the local computer’s operating environment.For example:./install.shThe install.sh script calls a utility, adcheck, which runs anumber of checks to verify that your domains are correctlyconfigured for Centrify DirectControl. You will see a number ofmessages indicating that the checks have passed or warnings andsuggestions on how to correct them. The adcheck utility verifiesDNS based on information in your configuration files.Follow the prompts displayed to select the services you want toinstall and the tasks you want to perform:• How do you want to proceed? (E |S|C|U|Q) [E]Enter E to install the Enterprise Edition of CentrifyDirectControl. Enterprise Edition installs everything youneed to evaluate Centrify DirectControl.Note Enterprise Edition includes the Centrify DirectAuditproduct, which is not covered in this evaluation guide. Toevaluate DirectAudit, see the Centrify DirectAudit EvaluationGuide.• Do you want to run adcheck to verify your ADenvironment?Enter N. If you specify Y, the install.sh script will calladcheck again to run operating system, network, and ActiveDirectory checks to verify that the specified domain iscorrectly configured for Centrify DirectControl. For thisevaluation, you can skip this check, then run it later if you46 Evaluation Guide
want to evaluate how it works, or to evaluate the readiness ofother machines or domains. See “Run adcheck on Linux,UNIX or Mac OS (Optional)” on page 52.• Join an Active Directory domain? [Y] You can answerY or N to join now or later. If you join now, you are promptedfor the domain name, authorized user, and password. You canclick Enter to accept the default values for the other prompts.See “Join the Active Directory domain on UNIX” on page 47for more information.• Enable auditing for all shells on this computer [Y]You can answer Y or N. This prompt is to enable auditing forCentrify DirectAudit, which is installed as part of CentrifySuite Enterprise Edition. DirectAudit is not part of theevaluation in this guide, however there is no harm in enablingauditing, and if you continue on to use the Centrify DirectAuditEvaluation Guide to evaluate DirectAudit, you’ll have a headstart.• Reboot the computer after installation? [Y] Enter Y.• Do you want to continue (Y) or re-enterinformation? Verify the information you have entered, thenenter Y and click return.If you chose not to join a domain, you may run the installationnow, then join a domain as described in the next section. If youchose to join a domain as part of the installation, you should stillread the information in the next section.Step 4: Join the Active Directory domain on UNIXWhen you install the Centrify DirectControl Agent on a Linux,UNIX, or Mac OS X computer, you can automatically join thatcomputer to an Active Directory domain by selecting this option inthe Centrify DirectControl installation script, install.sh. If youchoose to join the domain when you run the installation script, youare prompted to specify the domain and a user name and passwordChapter 3 • Installing Centrify DirectControl 47
Page 1 and 2: Centrify DirectControlEvaluation Gu
Page 6 and 7: • • • • • •Chapter 10 U
Page 9: • Chapter 4, “Using UNIX authen
Page 12 and 13: • • • • • • Where to go
Page 14 and 15: • • • • • • Contacting
Page 16 and 17: • • • • • • What can Ce
Page 18 and 19: • • • • • • How does Ce
Page 20 and 21: • • • • • • How does Ce
Page 22: • • • • • • Understandi
Page 25 and 26: Chapter 2Setting up the evaluation
Page 27 and 28: Checking Windows requirementsBefore
Page 29 and 30: • IBM AIX• Mac OS X• Oracle E
Page 31 and 32: Active Directory domain. For exampl
Page 33 and 34: Checking the DNS environmentCentrif
Page 35 and 36: In addition, because the virtual en
Page 37 and 38: Summary of the evaluation environme
Page 39 and 40: Chapter 3Installing Centrify Direct
Page 41 and 42: 3 Click the appropriate Administrat
Page 43 and 44: has configured for different classe
Page 45 and 46: 6 Select Install 30 day evaluation
Page 47: mechanism for a computer’s local
Page 51 and 52: For more information about the opti
Page 53 and 54: To check and disable, if necessary,
Page 55 and 56: eadiness of your machine to join th
Page 57 and 58: Chapter 4Using UNIX authentication
Page 59 and 60: 8 The Properties dialog box shows t
Page 61 and 62: Browse and type “hr” to display
Page 63 and 64: 1 Create another new user account i
Page 65 and 66: 4 Check the UNIX UID and GID assign
Page 67 and 68: Note This test does not work if the
Page 69 and 70: You can enforce any and all of thes
Page 71 and 72: 10 Run the adinfo command to see de
Page 73 and 74: Chapter 5Administering zonesAs disc
Page 75 and 76: Creating new zonesWhen you start th
Page 77 and 78: 11 Click Browse to enter search cri
Page 79 and 80: 5 Verify or change any of the defau
Page 81 and 82: administration of a zone to an indi
Page 83 and 84: 1 Grant permission to John Smith to
Page 85 and 86: Using the DirectControl Web Console
Page 87 and 88: files (C:\Program Files\centrify\Di
Page 89 and 90: 3 Select the zones to display and c
Page 91 and 92: Adding Active Directory users and g
Page 93 and 94: attributes, including UNX name, UID
Page 95 and 96: Chapter 7Using group policies for U
Page 97 and 98: • The Group Policy Object Editor
Page 99 and 100:
You should see the new login banner
Page 101 and 102:
1 Log in as an administrator on a W
Page 103 and 104:
Chapter 8Defining rights and rolesT
Page 105 and 106:
Getting started evaluating DirectAu
Page 107 and 108:
DirectControl. However, you must in
Page 109 and 110:
If you expand DZTest, you see nodes
Page 111 and 112:
4 In the console tree, select and e
Page 113 and 114:
12 Click the Commands Access tab, s
Page 115 and 116:
[suser]$adflushError: adflush may o
Page 117 and 118:
6 Click New.7 Enter the following c
Page 119 and 120:
• Description: Can execute ls, ca
Page 121 and 122:
As a quick sanity check for this ev
Page 123 and 124:
• Contract will start at the begi
Page 125 and 126:
8 Enter the following commands and
Page 127 and 128:
2 SSH to the machine using the logi
Page 129 and 130:
3 Select a user, for example, Sally
Page 131 and 132:
formats, or print them. See the Cen
Page 133 and 134:
Chapter 9Managing NIS maps in Activ
Page 135 and 136:
Creating and importing NIS maps in
Page 137 and 138:
Testing adnisdby typing the appropr
Page 139 and 140:
Chapter 10Using DirectControl with
Page 141 and 142:
authentication instead of Kerberos
Page 143 and 144:
DirectControl Agent in Centrify Dir
Page 145 and 146:
[global]security = ADSrealm = examp
Page 147 and 148:
Testing Samba on UNIXUse the follow
Page 149 and 150:
as Samba-CDC (hostname).3 Open the
Page 151 and 152:
Chapter 11Using DirectControl with
Page 153 and 154:
Setting up SSHAll configuration of
Page 155 and 156:
Working with DirectControl reportsC
Page 157 and 158:
perform additional tasks. For examp
Page 159 and 160:
Click Apply to group by the new cri
Page 161 and 162:
However, later on in the wizard you
Page 163 and 164:
Chapter 13Completing the evaluation
Page 165 and 166:
Item Description Significance Direc
Page 167 and 168:
Page 169 and 170:
Page 171 and 172:
• • • • • •IndexAaccess
Page 173 and 174:
creating maps 133importing maps 133
show all

Centrify DirectControl - Cerberis

Create successful ePaper yourself

Delete template?

Save as template?