Quest Authentication Services Deployment Options

Functionality Matrix

Active Directory SupportMapped UserStandardPersonality

Supports Win2K, Win2K3 at ALL forest functionality levels

x
x
x

Supports cross-forest trusts

x
x
x

Supports cross-domain trusts

x
x
x

Supports two-way, one-way and no-way trusts

x
x
x

Requires an AD schema modification

 
x*
x

Requires a Custom Schema Extension

  
x

*no modification required if the environment is running Windows Server 2003 “R2”

 

Host-based Access ControlMapped UserStandardPersonality
Supports native AD Group Policies
x
x
x
Supports native AD ‘Logon To’ attribute
x
x
x
Supports allow/deny based on an AD group membership
x
x
x
Supports allow/deny based on an AD OUs
x
x
x
Supports allow/deny based on an AD domain
x
x
x
Supports allow/deny based on an individual user
x
x
x
Supports allow/deny based on service (ssh, ftp, etc.)
x
x
x

 

Advanced Feature SupportMapped UserStandardPersonality
Enforces AD password policies on Unix, Linux, Mac
x
x
x
Supports user self-enrollment for migration
x

 

 

Supports permanent disconnected mode      Patent Pending
x
x
x
Provides centralized identity management

 

x
x
Supports un-rationalized Unix environments
x
x
x
Supports identity mapping     *See NIS Migration Support below
x
x
x
Supports secondary containers    *  
x

 

Application and Database Integration SupportMapped UserStandardPersonality
Supports LDAP authentication on every Authentication Services platform
x
x
x
Includes an SDK for every supported platform
x
x
x
Supports PAM and Kerberos authentication
x
x
x
Supports an SAP-certified single sign-on solution
x
x
x
Supports single sign-on  for Siebel on Unix
x
x
x
Supports Apache, Samba, OpenSSH, Sudo
x
x
x

 

Group Policy SupportMapped UserStandardPersonality
Extends AD Group Policy to Unix/Linux/Mac   Patent Pending
x
x
x
Supports ‘Computer’ Group Policies
x
x
x
Supports ‘User’ Group Policies
x
x
x
Supports ADM templates
x
x
x
Does not require ADM templates
x
x
x
Does not require Perl on the client to run Group Policy
x
x
x

 

NIS Migration SupportMapped UserStandardPersonality
NIS proxy available on every supported platform
x
x
x
Supports the GUI NIS map import tool
x
x
x
Supports the NIS synchronization tool
x
x
x
Supports the GUI NIS map editor tool
x
x
x
Supports NIS map storage in AD
x
x
x
Provides a NIS proxy on every supported platform
x
x
x
Supports Netgroups in AD thru a NSS module (no proxy)
x
x
x
Supports caching of NIS maps on the client
x
x
x