WINDOWS SECURITY AND DIRECTORY SERVICES FOR UNIX USING CENTRIFY DIRECTCONTROL
© CENTRIFY CORPORATION 2004-2005. ALL RIGHTS RESERVED.
Testing and Stabilizing the Centrify DirectControl
This section describes how to test and stabilize the Centrify DirectControlbased solution
in order to prepare for deploying it in your production environment.
Introduction and Goals
The purpose of the Stabilizing Phase is to improve the solution quality to a level that
meets your acceptance criteria for release to production. Stabilizing Phase testing
emphasizes usage and operation under realistic environmental conditions. In this phase,
you prioritize the bugs that testing discovers, fix all high-priority bugs, and prepare the
solution for release.
When you decide that a build is stable enough to be a release candidate and after you
complete preproduction testing, you deploy the solution to one or more pilot groups in the
Major Tasks and Deliverables
The two major Stabilizing Phase tasks that are relevant to Windows security and
directory services projects are:
Conducting a pilot
Testing the DirectControl Solution
This section describes how to test the DirectControl environment to ensure that key
capabilities are enabled and functioning correctly, but it is not meant to be an exhaustive
test guide to stress every feature of the DirectControl solution.
For additional information about testing the DirectControl product, including testing for
scenarios beyond the scope of this guide, see the documentation that comes with
DirectControl and additional documentation available on the Centrify Web site at
. In particular, the "Troubleshooting authentication and
authorization" section of the Centrify DirectControl Administrator's Guide can help if you
encounter problems or issues or if you require a higher level of debugging or diagnostics.
Testing Joining a UNIX Computer to Active Directory
Use the steps described earlier in the section "Confirm UNIX Computer Membership in
Active Directory" under "Perform Quick Validation Tests" to test whether a UNIX
computer is joined successfully to the Active Directory domain. A successful test shows
that a UNIX computer appears as a domain member in both Active Directory Users and
Computers and in the Centrify DirectControl Administrator Console on Windows. On the
UNIX computer itself, you can use the adinfo and getent utilities to determine the status
of the join.
Testing Active Directory Authentication
After the UNIX computer is joined to the Active Directory domain, you can test the use of
an Active Directory user account to authenticate to the UNIX computer.
Note Immediately after joining a UNIX computer to the Active Directory domain, to use
the GDM graphical login interface to authenticate a user logging on with an Active