HP S1000 Guía de usuario Pagina 130

  • Descarga
  • Añadir a mis manuales
  • Imprimir
  • Pagina
    / 172
  • Tabla de contenidos
  • MARCADORES
  • Valorado. / 5. Basado en revisión del cliente
Vista de pagina 129
UNIX File System Management
130 NAS 1000s Administration Guide
Password Synchronization
Password synchronization is an optional service that automatically synchronizes Windows
passwords with UNIX passwords across multiple machines or environments. This service is
included on the NAS 1000s, but it is not activated.
Figure 75: Password Synchronization screen
Password synchronization ensures that the machines contain identical and most current user
password database. When the user or administrator changes a password, the new password is
updated across all target machines.
Without password synchronization, the user could have different passwords on different
machines. If the administrator or user changed the password, the change would affect only that
single machine.
Password Synchronization Best Practices
Install Password Synchronization on all domain controllers to ensure consistent
synchronization of the Domain and the UNIX passwords.
Ensure consistent password policies.
If you are providing Windows to UNIX password synchronization, make sure the
Windows password policy is as restrictive in all areas as the UNIX policy. Failure to
ensure that password policies are consistent may result in synchronization failure.
Avoid synchronizing administrator passwords.
Do not synchronize passwords for members of the Windows Administrator groups or the
passwords of UNIX Superuser or Root accounts.
When Password Synchronization is installed, members of the local Administrators or
Domain Administrators group are added to the PasswordPropDeny group, which
prevents their passwords from being synchronized. If you add a user to either the
Administrators or Domain Admins group, be sure to add the user to the
PasswordPropDeny group.
The sync_users statement in the sso.conf file on UNIX systems prevents the
passwords of Superusers from being synchronized.
Vista de pagina 129
1 2 ... 125 126 127 128 129 130 131 132 133 134 135 ... 171 172

Comentarios a estos manuales

Sin comentarios