Manage Linux Endpoints Using Remote Inspection

You can inspect Linux endpoints using Remote Inspection with Active Directory (AD) domain accounts through AD password, Kerberos, or SSH key authentication.

Use Active Directory (AD) for Remote Inspection

Connect a Linux endpoint to an Active Directory (AD) domain to log in and use AD features. Linux endpoints connect using built-in system tools. AD users can log in after connection.

Note: Each AD user must have a local home directory.

To connect an endpoint to an Active Directory domain:

  1. Connect the domain

    Run: sudo realm join

    Enter AD administrator credentials when prompted.

  2. Verify the connection

    Run:realm list

    id [email protected]

  3. Turn on automatic home directories

    Run: sudo pam-auth-update --enable mkhomedir

Use SSH Key Authentication with Remote Inspection

SSH remote access requires distribution of the Appliance public key to managed endpoints when you use SSH key authentication.

For information about setting up SSH key authentication, see Distribute the Public Key.

When Not Using Remote Inspection

If you do not use Remote Inspection to manage Linux endpoints, clear the Remote Inspection option when you configure the plugin. This avoids unnecessary network overhead from establishing unused SSH connections.

When Remote Inspection is not used, you can use SecureConnector to manage devices. See Manage Endpoints Using SecureConnector for information about SecureConnector setup.

Note: Remote inspection detects when a system is ready for commands by matching the command prompt. If commands fail after connection, verify that the configured prompt pattern matches the endpoint prompt. See Prompt Patternfor configuration details.
Define a Remote Inspection User on Linux Endpoints

Define an admin-level user on each endpoint that you want to manage. This user should have the name you entered in the User field of the Remote Inspection tab during plugin configuration.