Centrify DirectControl - Cerberis

More documents

Recommendations

Info

• • • • • •for an Active Directory user with permission to add computers tothe domain.If you don’t want to join the domain when you run the installationscript, you can manually join a domain after installation using theadjoin command. Whether you add the computer to the domainautomatically from the install.sh script or manually using theadjoin command, once the computer is part of the domain, youcan enable any existing Active Directory users to log in to theUNIX system.Note On the Mac OS X, joining the domain and configuring yourenvironment is slightly different than on other platforms.Therefore, you should follow the steps in the section “Joining thedomain from Mac OS X computers” on page 49 to join an ActiveDirectory domain when the Centrify DirectControl Agent isinstalled on Mac OS X computers.To join an Active Directory domain manually after installation withthe Centrify DirectControl Agent on a Linux or UNIX computer:1 On the UNIX computer, log in as or switch to the root user.2 Run adjoin to join the Active Directory domain for yourevaluation environment.adjoin eval_domain_nameNote When you specify the domain name, you should use thefull domain name including the suffix. For example, by default,domains are created with a .LOCAL ending. There are also severalcommand line options to the adjoin command which have beenomitted here for simplicity, thus the defaults will be used.3 Type the password for the Administrator of this domain. IfCentrify DirectControl can connect to Active Directory and jointhe domain, a confirmation message is displayed. You are nowready to enable Active Directory users and groups to work withthis computer.48 Evaluation Guide
For more information about the options you can specify whenjoining a domain, see the man page for the adjoin command or the“Using adjoin” section in the Centrify DirectControl Administrator’sGuide.Joining the domain from Mac OS X computersWhen you install the Centrify DirectControl Agent on a computerrunning the Mac OS X operating system, the steps for joining anActive Directory domain are similar to the steps for joining thedomain on Linux or UNIX computers but there are a few slightdifferences.After you install the Centrify DirectControl Agent on a computerwith Mac OS X, do the following to join that computer to anActive Directory domain manually:1 Go to the Utilities folder and double-click Terminal to open anew terminal window.2 Type the following command:sudo adjoin domain_name3 When prompted for the password, type your MacintoshAdministrator password. For example:Password: ***4 When prompted for the Active Directory password, type thepassword for the Active Directory Administrator account. Forexample:Active Directory Password: ***Automounting files shares from Mac OS X computers If you configure NFS,SMB, or AFP network file sharing for your Mac OS X computers,you can automatically mount and log on to file shares using ActiveDirectory credentials.To enable Mac OS X users to log on to file shares when yournetwork is configured with NFS, SMB, or AFP network sharing:1 Open Active Directory Users and Computers or the CentrifyChapter 3 • Installing Centrify DirectControl 49
Page 1 and 2: Centrify DirectControlEvaluation Gu
Page 6 and 7: • • • • • •Chapter 10 U
Page 9: • Chapter 4, “Using UNIX authen
Page 12 and 13: • • • • • • Where to go
Page 14 and 15: • • • • • • Contacting
Page 16 and 17: • • • • • • What can Ce
Page 18 and 19: • • • • • • How does Ce
Page 20 and 21: • • • • • • How does Ce
Page 22: • • • • • • Understandi
Page 25 and 26: Chapter 2Setting up the evaluation
Page 27 and 28: Checking Windows requirementsBefore
Page 29 and 30: • IBM AIX• Mac OS X• Oracle E
Page 31 and 32: Active Directory domain. For exampl
Page 33 and 34: Checking the DNS environmentCentrif
Page 35 and 36: In addition, because the virtual en
Page 37 and 38: Summary of the evaluation environme
Page 39 and 40: Chapter 3Installing Centrify Direct
Page 41 and 42: 3 Click the appropriate Administrat
Page 43 and 44: has configured for different classe
Page 45 and 46: 6 Select Install 30 day evaluation
Page 47 and 48: mechanism for a computer’s local
Page 49: want to evaluate how it works, or t
Page 53 and 54: To check and disable, if necessary,
Page 55 and 56: eadiness of your machine to join th
Page 57 and 58: Chapter 4Using UNIX authentication
Page 59 and 60: 8 The Properties dialog box shows t
Page 61 and 62: Browse and type “hr” to display
Page 63 and 64: 1 Create another new user account i
Page 65 and 66: 4 Check the UNIX UID and GID assign
Page 67 and 68: Note This test does not work if the
Page 69 and 70: You can enforce any and all of thes
Page 71 and 72: 10 Run the adinfo command to see de
Page 73 and 74: Chapter 5Administering zonesAs disc
Page 75 and 76: Creating new zonesWhen you start th
Page 77 and 78: 11 Click Browse to enter search cri
Page 79 and 80: 5 Verify or change any of the defau
Page 81 and 82: administration of a zone to an indi
Page 83 and 84: 1 Grant permission to John Smith to
Page 85 and 86: Using the DirectControl Web Console
Page 87 and 88: files (C:\Program Files\centrify\Di
Page 89 and 90: 3 Select the zones to display and c
Page 91 and 92: Adding Active Directory users and g
Page 93 and 94: attributes, including UNX name, UID
Page 95 and 96: Chapter 7Using group policies for U
Page 97 and 98: • The Group Policy Object Editor
Page 99 and 100: You should see the new login banner
Page 101 and 102:
1 Log in as an administrator on a W
Page 103 and 104:
Chapter 8Defining rights and rolesT
Page 105 and 106:
Getting started evaluating DirectAu
Page 107 and 108:
DirectControl. However, you must in
Page 109 and 110:
If you expand DZTest, you see nodes
Page 111 and 112:
4 In the console tree, select and e
Page 113 and 114:
12 Click the Commands Access tab, s
Page 115 and 116:
[suser]$adflushError: adflush may o
Page 117 and 118:
6 Click New.7 Enter the following c
Page 119 and 120:
• Description: Can execute ls, ca
Page 121 and 122:
As a quick sanity check for this ev
Page 123 and 124:
• Contract will start at the begi
Page 125 and 126:
8 Enter the following commands and
Page 127 and 128:
2 SSH to the machine using the logi
Page 129 and 130:
3 Select a user, for example, Sally
Page 131 and 132:
formats, or print them. See the Cen
Page 133 and 134:
Chapter 9Managing NIS maps in Activ
Page 135 and 136:
Creating and importing NIS maps in
Page 137 and 138:
Testing adnisdby typing the appropr
Page 139 and 140:
Chapter 10Using DirectControl with
Page 141 and 142:
authentication instead of Kerberos
Page 143 and 144:
DirectControl Agent in Centrify Dir
Page 145 and 146:
[global]security = ADSrealm = examp
Page 147 and 148:
Testing Samba on UNIXUse the follow
Page 149 and 150:
as Samba-CDC (hostname).3 Open the
Page 151 and 152:
Chapter 11Using DirectControl with
Page 153 and 154:
Setting up SSHAll configuration of
Page 155 and 156:
Working with DirectControl reportsC
Page 157 and 158:
perform additional tasks. For examp
Page 159 and 160:
Click Apply to group by the new cri
Page 161 and 162:
However, later on in the wizard you
Page 163 and 164:
Chapter 13Completing the evaluation
Page 165 and 166:
Item Description Significance Direc
Page 167 and 168:
Page 169 and 170:
Page 171 and 172:
• • • • • •IndexAaccess
Page 173 and 174:
creating maps 133importing maps 133
show all

Centrify DirectControl - Cerberis

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?