This document is a cache from http://www.centrify.com/downloads/public/centrify_dc_solution_guide.pdf

Solution Guide: Windows Security and Directory Services for ...

Document source : www.centrify.com

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 All Pages

WINDOWS SECURITY AND DIRECTORY SERVICES FOR UNIX USING CENTRIFY DIRECTCONTROL

PAGE 41

Testing and Stabilizing the Centrify DirectControl

Solution

This section describes how to test and stabilize the Centrify DirectControlbased solution
in order to prepare for deploying it in your production environment.

Introduction and Goals

The purpose of the Stabilizing Phase is to improve the solution quality to a level that
meets your acceptance criteria for release to production. Stabilizing Phase testing
emphasizes usage and operation under realistic environmental conditions. In this phase,
you prioritize the bugs that testing discovers, fix all high-priority bugs, and prepare the
solution for release.
When you decide that a build is stable enough to be a release candidate and after you
complete preproduction testing, you deploy the solution to one or more pilot groups in the
production environment.

Major Tasks and Deliverables

The two major Stabilizing Phase tasks that are relevant to Windows security and
directory services projects are:

Testing

the

solution

Conducting a pilot

Testing the DirectControl Solution

This section describes how to test the DirectControl environment to ensure that key
capabilities are enabled and functioning correctly, but it is not meant to be an exhaustive
test guide to stress every feature of the DirectControl solution.
For additional information about testing the DirectControl product, including testing for
scenarios beyond the scope of this guide, see the documentation that comes with
DirectControl and additional documentation available on the Centrify Web site at

http://www.centrify.com

. In particular, the "Troubleshooting authentication and

authorization" section of the Centrify DirectControl Administrator's Guide can help if you
encounter problems or issues or if you require a higher level of debugging or diagnostics.

Testing Joining a UNIX Computer to Active Directory

Use the steps described earlier in the section "Confirm UNIX Computer Membership in
Active Directory" under "Perform Quick Validation Tests" to test whether a UNIX
computer is joined successfully to the Active Directory domain. A successful test shows
that a UNIX computer appears as a domain member in both Active Directory Users and
Computers and in the Centrify DirectControl Administrator Console on Windows. On the
UNIX computer itself, you can use the adinfo and getent utilities to determine the status
of the join.

Testing Active Directory Authentication

After the UNIX computer is joined to the Active Directory domain, you can test the use of
an Active Directory user account to authenticate to the UNIX computer.
Note Immediately after joining a UNIX computer to the Active Directory domain, to use
the GDM graphical login interface to authenticate a user logging on with an Active