loudlkak.blogg.se

To join servers to the Active Directory using the Centrify agent requires privileged authentication to create or update data in the Active Directory domain. Configuring the service account Kerberos secret

Obtain your repo key, by following instructions in the Centrify Customer Portal.įor more details on all Centrify repos available, login to the Centrify Customer Portal and visit.

The setup example below shows how to setup a Yum repository assuming that the Ansible server is using RedHat Enterprise Linux or a RedHat derivative distribution (example: CentOS, Fedora, etc.). The Centrify repo should be configured first on your Ansible server using the appropriate configuration based on your Linux distribution.

For Centrify Identity Platform Management operation, Centrify recommends using registration codes for system enrollment and OAuth2 protocol for REST API calls.Īnsible is used to manage the repository configuration (included into the sample Playbooks below).

For Active Directory management operation, Centrify recommends using a privileged service account and to maintain a Kerberos keytab file to avoid using password authentication.

Centrify software deployment on Unix and Linux is supported using Centrify repository which can be addressed publicly (or mirrored if you are planning to use it for deployment onto systems that cannot access the Internet).

Centrify recommends the following practice for silent installation and automated management:

For details on enabling Windows management with Ansible, refer to Ansible documentation.Īutomation includes unattended silent installation and bypassing password type credentials reserved for interactive authentication.

To enable Windows management by using the Ansible “winrm” module, install the Python module as documented by Ansible.

Enabling Windows management with AnsibleĪnsible is used to manage Windows systems using PowerShell commands and command lines over WinRM. For more information on additional distributions, refer to Ansible documentation.

You can also use Ansible on additional distributions. Using Centrify playbooks for Ansible Installing AnsibleĪnsible is widely available on Linux OS and can be installed using the Yum command on all RedHat type distributions.