Re: find-generic-password /Active Directory/DOMAINAME Equivelent for Centrify
, Hmmm... seems to be something we can help you with by enhancing the way we are doing things (on the long run), but perhaps.... ...did you try changing the umask on the target directory as a potential...
View ArticleRe: find-generic-password /Active Directory/DOMAINAME Equivelent for Centrify
I did actually have an open ticket with Centrify to work on that issue with the back end way of doing thing. But you are right about the long run. It may not be impemented until later in the year. I...
View Articlekinit as service account
I have 5 node RH clluster & 1 AD. I used centrify express to integrate with AD.HW distribution. enabled kerberos and stored all SPN's on AD by creating a seperate OU. when i try with UPN it just...
View ArticleRe: kinit as service account
I think i figured it out, when i do a sudo from one account to another i need to destroy old ticket else it cannot wrote to ticket cache since it is owned by other account.
View ArticleRe: kinit as service account
That's exactly the reason. The Kerberos ticket cache is a file and the user running klist needs to have access to the credential cache or better yet from a security perspective, the users that need...
View ArticleAm I missing something?
I currently am using Centrify express with DirectManage Deployment Manager installed on Server 2012 R2 linked to my Domain controller. I am trying to update the agents on my Mac computers (Currently...
View ArticleRe: Am I missing something?
Hi Alov, Yes we support Mac OS 10.12 in our latest version (5.4.0). You can find the download page from below link after filling out the form. You can find both DirectManage (for Deployment Manager)...
View ArticleRe: Am I missing something?
So I downloaded the latest DirectManage Deployment Manager (version 5.4.0.219) and when I go to deploy the agent it says the same things version unsupported.
View ArticleRe: macOS Sierra 10.12.2 DOD CAC Access Issues
I've had all the same problems and am hoping to disable the built-in Sierra smart card support as well but don't understand what this link is telling me to do. I found that referenced file but am not...
View ArticleRe: Am I missing something?
Hi Alov, Can you try to import the "centrify-product-catalog-offline" to the Deployment Manager (DM)? 1. On DM select the top node from left panel - "Centrify DirectManage Deployment Manager", right...
View ArticleRe: Am I missing something?
Hi , I believe the root cause is due to the current Centrify version that is installed on the Mac is 5.3.0 and it does not support OS X 10.12.x When the Deployment Manager tries to run the adcheck with...
View ArticleCan I get the Group Policy templates with Centrify express for Linux/Unix?
I am trying to figure out how to do GPO's with Centrify Express. Is this possible? I am only looking for a policy that can help with password requirements/expiration. Thank you, Jay
View ArticleRe: Can I get the Group Policy templates with Centrify express for Linux/Unix?
, Welcome to the forums.You need at least Centrify Standard Edition to be able to use Centrify-provided group policies. Account, Kerberos, Lockout and other GPOs are processed automatically, so you...
View ArticleRe: Can I get the Group Policy templates with Centrify express for Linux/Unix?
Does it generally take awhile for the lockout/other gpos to propagate to the machine running Centrify Express?
View ArticleRe: Can I get the Group Policy templates with Centrify express for Linux/Unix?
The ones that are enforced in Express should be effective immediately after you join (e.g. Account, Kerberos, Lockout), unless you're making changes to them, in that case you can use the adgpupdate...
View ArticleRe: macOS Sierra 10.12.2 DOD CAC Access Issues
Hi , According to the Apple post, you can achieve the same by the below steps: 1. Login as local admin 2. Bring up terminal (which you can search "terminal" to get it) 3. In the terminal session,...
View ArticleERR_SSL_CLIENT_AUTH_SIGNATURE_FAILED
Trying to use a CAC card on my mac. I've been through all the steps on militarycac.com and I still get the error code in the subject line of this message when I try to use it with chrome. Also getting...
View ArticleRe: ERR_SSL_CLIENT_AUTH_SIGNATURE_FAILED
Hi , Welcome to Centrify community! Please try to perform the following steps and see if that would help resolve the issue: CAC and CACNG tokend must be removed.The following steps needs to be done on...
View ArticleRe: Am I missing something?
How do I get the agent to do a manual install on the mac? Once that it is installed I assume I do a analyze to see if it is updated and checking in correctly?
View ArticleRe: Am I missing something?
https://docs.centrify.com/en/centrify/macadmin/index.html#page/macadmin%2Fadm_Installing.html%23
View Article