Consistent and auditable management of user accounts and access across diverse UNIX and GNU Linux systems can be difficult. Editing the /etc/password file may be acceptable for managing one or two systems, but beyond that, more centralized management is required. Traditional methods such as NIS and NIS+, while still available in most UNIX distributions, are being phased out and are impractical. Other Kerberos and LDAP-based approaches meant to replace these older systems are complex to implement and often require the creation of custom UNIX Pluggable Authentication Modules (PAM) to support consistent access enforcement, password management, and host access control.

While HCM has implemented these types of systems, which can meet the needs of administrators and auditors, we’ve found that they are not necessarily the most cost-effective answer.

That’s why Hub City Media has partnered with Centrify to integrate Centrify’s Direct Control, Direct Authorize, and Direct Audit products. Our staff can provide architecture and implementation services for deploying Centrify in even the most complex environments. But we don't stop there. Hub City Media has created a complete, streamlined solution for enterprise UNIX account provisioning and access management.

Our solution integrates Sun Identity Manager with pre-built forms, workflows, and system adapters that seamlessly integrate with Centrify's products, which make use of Microsoft Active Directory, to manage UNIX accounts. Our solution lets you:

• Automatically provision and de-provision UNIX system access based on data from external systems such as HR
• Control what systems or groups of systems users can access with their accounts
• Restrict what commands users can execute and with what permissions they can execute those commands
• Audit all user interaction with each system

In fact, using Centrify, our solution can fully reconstruct all user sessions on every machine and can maintain all historical data for as long as necessary. This type of audit capability is critical when certifying systems for PCI, SAS 70, or other audit standards and compliance controls.

Proof positive? We use this solution to manage our own physical and virtual UNIX infrastructure, so we know it offers the best control possible. Our architects and engineers are certified Centrify experts and can help you create a system to meet your precise business needs.