Applies to: All versions of Centrify DirectControl
Question:
What system files does DirectControl modify at the time of installation/join of the agent?.
Answer:
Centrify does NOT modify any system configuration files at the time of install, but only at the time of join operation. During the join operation, any systems files DirectControl agent changes gets backed up. For e.g.,nsswitch.conf will be backed up as nsswitch.conf.pre_cdc and so on. These files will be restored to their original versions upon adleave operation.
Here are some of the files we touch:
1) Kerberos configuration files
Most platforms: /etc/krb5.conf
Solaris, AIX: /etc/krb5/krb5.conf
2) Kerberos keytab file
Most platforms /etc/krb5.keytab
Solaris, AIX: /etc/krb5/krb5.keytab
3) NSS configuration file
Most platforms /etc/nsswitch.conf
4) PAM configuration file
HPUX, Solaris, AIX /etc/pam.conf
Red Hat Linux /etc/pam.d/system-auth
All other Linux /etc/pam.d/*
5) LAM configuration file
AIX /usr/lib/security/methods.cfg
6) Login control file
AIX /etc/security/user
