This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Integrate AD Domain to PAM

Chuong93 over 5 years ago

Hi all

Please help to integrate AD Domain to PAM , i mean use user domain instead user local PAM to login admin console and myaccess console , i haved researched for myself but find nothing . Please intruct .

Thanks

Parents

0 tdharris over 5 years ago

A helpful resource is the Administration Guide of PAM:
https://www.netiq.com/documentation/privileged-account-manager-3/npam_admin/data/bookinfo.html

You'll want to first create the LDAP Account for AD in the Enterprise Credential Vault:
https://www.netiq.com/documentation/privileged-account-manager-3/npam_admin/data/brxvkf6.html#brxaxxa

Then to configure this Account Domain to be used as the default Authentication Domain within PAM, see Configuring Account Settings > Authentication Domain within the Framework User Manager Console:
https://www.netiq.com/documentation/privileged-account-manager-3/npam_admin/data/user_account_settings.html#bjflv4n

This should permit login as you have described.

--

After adding AD LDAP as an Account Domain and set it as the default Authentication Domain, then you'll be considering Privileged Account Management for Windows:
https://www.netiq.com/documentation/privileged-account-manager-3/npam_admin/data/pam_windows.html

During the "Workflow to Configure Privileged Session for Windows" steps, when creating the User Group, it's also possible to configure an LDAP Group Lookup to reference an external LDAP Group located in AD:
https://www.netiq.com/documentation/privileged-account-manager-3/npam_admin/data/brxvkf6.html
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 tdharris over 5 years ago

A helpful resource is the Administration Guide of PAM:
https://www.netiq.com/documentation/privileged-account-manager-3/npam_admin/data/bookinfo.html

You'll want to first create the LDAP Account for AD in the Enterprise Credential Vault:
https://www.netiq.com/documentation/privileged-account-manager-3/npam_admin/data/brxvkf6.html#brxaxxa

Then to configure this Account Domain to be used as the default Authentication Domain within PAM, see Configuring Account Settings > Authentication Domain within the Framework User Manager Console:
https://www.netiq.com/documentation/privileged-account-manager-3/npam_admin/data/user_account_settings.html#bjflv4n

This should permit login as you have described.

--

After adding AD LDAP as an Account Domain and set it as the default Authentication Domain, then you'll be considering Privileged Account Management for Windows:
https://www.netiq.com/documentation/privileged-account-manager-3/npam_admin/data/pam_windows.html

During the "Workflow to Configure Privileged Session for Windows" steps, when creating the User Group, it's also possible to configure an LDAP Group Lookup to reference an external LDAP Group located in AD:
https://www.netiq.com/documentation/privileged-account-manager-3/npam_admin/data/brxvkf6.html
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data

Menu

PAM User Discussions

Integrate AD Domain to PAM

Resources