Active Directory Authentication for Linux on IBM System z

Linux on IBM System z: A collective term for all Linux distributions that are compiled to run on the IBM System z mainframe platform. The primary Linux distributions being used in production on the System z platform include Novell’s SUSE Linux Enterprise Server and Red Hat Enterprise Linux. More information can be found on the Linux for IBM System z product page or on Wikipedia.

The Centrify Suite for Linux on IBM System z centrally manages identities, access policies and role-based entitlements for fine-grained control of user access and privileges using Microsoft Active Directory. Click a topic to learn more:

Features & Benefits

The Centrify Suite centrally secures cross-platform data centers through Active Directory-based identity and access management of UNIX, Linux and Mac systems, workstations and applications. The core part of the Centrify Suite is Centrify DirectControl, which secures your non-Microsoft platforms using the same authentication and Group Policy services deployed for your Windows environment. Centrify DirectAuthorize centrally manages and enforces role-based entitlements for fine-grained control of user access and privileges on UNIX and Linux systems. Centrify OpenSSH delivers secure single sign-on to systems. Built on a common architecture, the seamlessly integrated Centrify Suite of solutions helps you improve IT efficiency, strengthen regulatory compliance initiatives, and centrally secure your heterogeneous computing environment. Key features and benefits include:

Centralized Identity & Access Management

• Move to a central directory and single point of administration, thereby eliminating redundant identity stores and standardizing on a single set of tools and processes.
• Provide administrators and end-users with a single sign-on account.
• Use Centrify's unique Zone-Based Access Control to apply the granular access control that real-world enterprises need to securely manage their heterogeneous environments.
• Enforce enterprise-wide security policies with Group Policy for UNIX, Linux and Mac.

Role-Based Access Controls & Privilege Management

• Set time windows when a role can access a system, and time periods when a role assignment is active.
• Lock down sensitive systems with fine-grained controls that set who can access a system and how.
• Grant users rights to execute commands with elevated privileges, eliminating the need for access to privileged accounts and passwords.
• Assign users a Restricted Environment with access only to a specific "whitelist" of commands.

How it Works

Install the Centrify DirectControl Agent on each Linux guest system that you want to manage centrally from Active Directory. The DirectControl Agent joins the guest system to your Active Directory domain, enabling it to be managed like a Windows computer. DirectAuthorize's privilege management features are seamlessly integrated into the DirectControl Agent; there are no separate agents or management servers to deploy. Centrify provides a Windows GUI and a command-line interface so you can use your tool of choice to manage Active Directory users' access, roles and privileges to those systems and the applications running on them.

Install the DirectControl Agent on each Linux guest system.

The Centrify Suite for Linux on IBM System z is different than RACF or other IdM tools that focus only on the mainframe. The Centrify Suite is architected from the ground up to provide native integration with Active Directory, with no middleware server to worry about and more complete control over users' access, roles and privilege levels. Centrify also provides the most comprehensive support for all the versions of UNIX and Linux in your data center.

Supported Platforms

Summary

Details

Systems A-Z		32-bit	64-bit
How to read this chart: Early Access Recent Additions Supported
Novell SUSE Linux	Ent. Server 10 SP2 S/390x
	Ent. Server 11 SP1 on S/390x
Red Hat Enterprise Linux	AS/ES/WS 5.2 S/390x

= Currently supported.
= Available through our Early Access program. Ask your Centrify support or sales representative for access.

Summary

Details

Systems A-Z		32-bit	64-bit
Click Show Details for a list of every platform, including notifications of upcoming or recently added versions.
Novell SUSE Linux	Ent. Server 10 SP2, 11 SP1 S/390x
Red Hat Enterprise Linux	AS/ES/WS 5 S/390x