Quest™ Authentication Services
Welcome to Quest Authentication Services
New in this Release
Third-Party Known Issues
Upgrade and Compatibility
For More Information
Authentication Services extends the capabilities of Unix, Linux, and Mac systems to seamlessly and transparently join Active Directory and integrate Unix identities with Active Directory Windows accounts.
Authentication Services, the solution that pioneered the "Active Directory Bridge" market continues to lead the way with powerful and innovative new capabilities that make heterogeneous identity and access management even more efficient, secure, and compliant.
See Resolved Issues or the list of issues addressed and enhancements implemented in this release.
Authentication Services 4.1 features include:
Upgrade Without Reboot – This version of Authentication Services adds the functionality required so that future upgrades will no longer require a system reboot. Some customer deployments of Authentication Services have been running on old versions for long periods of time because of the difficulties of scheduling server down time. With Authentication Services 4.1 deployed as the foundation, future releases will allow customers to deploy upgrades without impacting running services or rebooting.
IPv6 Support – Authentication Services now supports hosts running
in full IPv6 environments. QAS automatically uses IPv6 when it is available;
it uses IPv4 when IPv6 is not unavailable or significantly slower than IPv4.
IPv6 is available in QAS on most recent operating systems, but is operating
system dependent. Run
vastool info ipv6 to determine whether IPv6
is available on each client. QAS operates in IPv4-only, IPv6-only, or dual-stack
environments; no special configuration is required. Active Directory servers
must be running Windows 2008 or later for IPv6 communication.
QAS uses IPv6 when the operating system's DNS resolver correctly supports mapping of IPv4 addresses to IPv6 addresses. If a problem with address mapping is detected, QAS operates in IPv4-only mode, even if an IPv6 address is assigned and other applications use IPv6.
Customizable Windows Components Installer - The Windows installer now allows you to install individual components. The granule install includes: core components, ADUC extensions, Group Policy Extensions, Documentation, and the Control Center. For example, you can install an individual MMC snap-in without installing the entire Control Center application. These components are also available as MSI packages for automated and configurable installation.
Group Policy Updates:
users.allowto be delivered to every system with the contents overwriting any changes made to the local copy of
NOTE: When upgrading Authentication Services, you must manually add this new preference manifest. Refer to the "Preference Manifest Settings" topic in the Authentication Services 4.1 Mac OS X Administrator's Guide for the procedure "To Add a Preference Manifest".
The following is a list of issues addressed and enhancements implemented in Authentication Services 4.1. Note: Various defects have been resolved and updated in the quarterly Authentication Services 4.0.3 maintenance releases and have been ported to this release. For more information on these fixes refer to the 4.0.3 changelog.
|Resolved Issue||Defect ID|
|Authentication Services now honors the Apply Group Policy ACL for denial of Group Policy to computers, users, and groups through this permission.||19110|
The following is a list of issues known to exist at the time of Authentication Services 4.1 release.
|Known Issue||Defect ID|
|After installing QAS 4.1.0 the machine must be rebooted for ChangeAuditor to log "QAS GPO Setting Changed" events.||28008|
The process for upgrading the Authentication Services Windows components from older versions to version 4.1 is similar to the installation process. The Windows installer detects older versions and automatically upgrades them. The next time you launch Active Directory Users and Computers, Authentication Services uses the updated Windows components.
Authentication Services allows you to perform all of your Unix identity management tasks from the Authentication Services Control Center. Please refer to the Authentication Services Upgrade Guide for more detailed information about upgrading your current version of Authentication Services using the Authentication Services Control Center.
Of course, you may perform your Unix client management tasks from the Unix command line, if you prefer. You can find those instructions in the Authentication Services Administrator's Guide.
Before installing Authentication Services, ensure your system meets the minimum hardware and software requirements for your platform. The operating system patch level, hardware, and disk requirements vary by Unix, Linux, and Active Directory platform, and are detailed in the Authentication Services Administrators Guide.
Use of RFC 2307 attributes in the user object and for storage of NIS maps requires the installation of the Microsoft Windows Server 2003 R2 schema.
This product does not require licensing for the evaluation of features. However, Management Console for Unix will notify you if you have not installed a valid license key.
To activate a purchased commercial license
This section contains information about installing and operating this product in non-English configurations, such as those needed by customers outside of North America. This section does not replace the materials about supported platforms and configurations found elsewhere in the product documentation.
This release is Unicode-enabled and supports any character set. In this release, all product components should be configured to use the same or compatible character encodings and should be installed to use the same locale and regional options. This release is targeted to support operations in the following regions: North America, Western Europe and Latin America, Central and Eastern Europe, Far-East Asia, Japan.
This release has the following known capabilities or limitations: Quest Authentication Services has been tested with double-byte configured locales on the Linux platform. All of the client side components operate successfully with double-byte characters in all Unix attributes
There is no localization of either the client or Windows user interface.
The Authentication Services release package contains the following products:
Note: You can find the Authentication Services product documentation at: http://documents.software.dell.com/Product.aspx?id=117.
Refer to the Authentication Services 4.1 Installation Guide for detailed installation instructions.
Get the latest product information, find helpful resources, test the product betas, and join a discussion with the development team and other community members. Join the Community at Identity and Access Management community.
Dell listens to customers and delivers worldwide innovative technology, business
solutions and services they trust and value. For more information, visit
Product Questions and Sales:
(800) 306 – 9329
Support is available to customers who have a trial version or who have purchased Quest software and have a valid maintenance contract. The Support Portal at http://software.dell.com/support is the definitive resource for technical support with self-help capabilities so you can solve problems quickly and independently 24 hours a day, 365 days a year. The portal also provides direct access to our support engineers through an online service request facility. From one central location, you will find everything you need – support offerings, policies and procedures, contact information, as well as:
1 For trial users please use the Trial Downloads to get the latest generally available version of the software.
Quest Software is now Dell Software
© 2014 Quest Software, Inc.
ALL RIGHTS RESERVED.
This document contains proprietary information protected by copyright. The software described in this guide is furnished under a software license or nondisclosure agreement. This software may be used or copied only in accordance with the terms of the applicable agreement. No part of this guide may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying and recording for any purpose other than the purchaser's personal use without the written permission of Quest Software, Inc.
The information in this document is provided in connection with Quest products. No license, express or implied, by estoppel or otherwise, to any intellectual property right is granted by this document or in connection with the sale of Quest products. EXCEPT AS SET FORTH IN QUEST'S TERMS AND CONDITIONS AS SPECIFIED IN THE LICENSE AGREEMENT FOR THIS PRODUCT, QUEST ASSUMES NO LIABILITY WHATSOEVER AND DISCLAIMS ANY EXPRESS, IMPLIED OR STATUTORY WARRANTY RELATING TO ITS PRODUCTS INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. IN NO EVENT SHALL QUEST BE LIABLE FOR ANY DIRECT, INDIRECT, CONSEQUENTIAL, PUNITIVE, SPECIAL OR INCIDENTAL DAMAGES (INCLUDING, WITHOUT LIMITATION,DAMAGES FOR LOSS OF PROFITS, BUSINESS INTERRUPTION OR LOSS OF INFORMATION) ARISING OUT OF THE USE OR INABILITY TO USE THIS DOCUMENT, EVEN IF QUEST HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Quest makes no representations or warranties with respect to the accuracy or completeness of the contents of this document and reserves the right to make changes to specifications and product descriptions at any time without notice. Quest does not make any commitment to update the information contained in this document.
If you have any questions regarding your potential use of this material, contact:
Quest Software World Headquarters
Attn: LEGAL Dept
5 Polaris Way
Aliso Viejo, CA 92656
Refer to our Web site (www.software.dell.com) for regional and international office information.
This product is protected by U.S. Patents #7,617,501; 7,895,332; 7,904,949; 8,086,710; 8,087,075, and 8,245,242. Additional patents pending.
Quest, Quest Software, the Quest Software logo, Simplicity at Work, and Vintela are trademarks and registered trademarks of Quest Software, Inc. For a complete list of Quest Software’s trademarks, see http://www.dell.com/learn/us/en/uscorp1/solutions/art-trademarks-us?c=us&l=en&s=corp. Other trademarks are property of their respective owners.
This product contains some third-party components (listed below). Copies of their licenses may be found at http://software.dell.com/legal/third-party-licenses.aspx. Source code for components marked with an asterisk (*) is available at http://rc.quest.com
|Component||License or Acknowledgement|
|Apache Commons 1.2||The Apache Software License
This product includes software developed by the Apache Software Foundation (http://www.apache.org/)
|Boost Software License 1.38||Boost Software License - Version 1.0 - August 17th, 2003|
|Expat 2.0.0||©1998, 1999, 2000 Thai Open Source Software Center Ltd|
|Heimdal Krb/GSSapi 1.2||©2004 - 2007 Kungliga Tekniska Hosgskolan (Royal Institute of Technology, Stockholm, Sweden). All rights reserved.|
|OpenSSL 0.9.8d||This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/) ©1998-2008 The OpenSSL Project. All rights reserved.|
|Jansson 2.3.0||MIT License http://www.opensource.org/licenses/mit-license.php|
|Json-lib 2.1||Artistic License 1.0 © 2002 JSON.org|