ALP Group: The import-independent domain controller with advanced functionality, compatible to the Active Directory

2019: Creation and beginning of deliveries of an import-independent HSS

On April 16, 2019 the company ALP Group announced creation and the beginning of deliveries of the first in Russia the import-independent hardware and software system (HSS) in which the expanded set of functions of the controller domain Active Directory, including management of group politicians is implemented.

According to the company, the HSS is completely ready to large-scale application in the Russian organizations. In PACK ICES on the basis of both supported hardware platforms — servers architecture x86 and servers "Elbrus" — it is applied operating system Viola Server to the corresponding hardware platform. It provides efficiency of use of the equipment, and in a configuration on a basis Elbrus — also higher level information security. Expanded technical support and a number of specialized IT services simplify implementation and operation of these PACK ICES in the territory of the Russian Federation. This development of ALP Group is of interest to the organizations preparing for large-scale projects on digitalization and to import substitution critical IT infrastructures and applied SOFTWARE. Among potential customers — federal regional, municipal authorities, state corporations, security agencies, industrial enterprises and a MIC. Vertically integrated holdings playing a key role in branches of the economy, important for the country (energy industry transport power production of food). And also any organizations aiming to reduce direct and indirect risks, connected using proprietary western software.

"The import-independent domain controller with advanced functionality, compatible to AD" the politician both provides functions of authentication and centralized operation to a HSS for Windows - and for Linux segments of the information system (IS) using group. At the same time Samba DC (a free analog of Microsoft Active Directory) integrated into OS Alt software supports structure of directories and storage of the files used by regular means of Windows OS for the description and application group the politician. It: editors the politician, equipments and also a software agent of the Active Directory for Windows workstations. In other words, by a HSS the politician of Windows in full supports implementation group.

In Linux segment of function of authentication / access control and group politicians are separated. For the first group of functions in a HSS Samba DC, is responsible for the second — a management system for the Puppet software configurations. A system based on Puppet is distinguished by management tools workstations: the agent of making changes and means of automatic control of the executed changes. Change control — big advantage of Linux segment IC. No, respectively, the administrator of Windows segment definitely does not know such control in Microsoft AD what changes happened and what are not present. The management system for configurations for Linux is high-level: the administrator defines a target status of the server or workstation, and a system itself selects what changes, as well as in what order it is necessary to execute. Also carries automatically out them. Both of these differences sharply reduce an error probability and give economy of efforts at management of the IC with hundreds of servers and thousands of workstations. This advantage quickly outweighs the inconveniences connected with different implementation group the politician in Windows - and Linux segments.

Accomplishment of group policy requires implementation on specific servers and workstations of these or those actions (installations, updates and reconfiguration of software, making changes in the user interface, a certain setup of network interfaces and mn. other). In Puppet of the description of such actions are taken out in separate modules which (thanks to openness of these systems) can independently develop service companies, integrators and customers. However this work is complicated significantly by a large number and a variety of such modules. And also need to design them so that it was possible to apply repeatedly without changes them in different projects. Therefore ALP Group developed the most demanded modules in advance and made them available to the organizations – PAK'S users. For April, 2019 it is about 70% of total number of modules which can be required when implementing group the politician in the large organization. As shows experience, this set for 90-95% closes requirements of the majority of specific projects.

For the PACK ICE the expanded vendor technical support of software and the hardware in all territory of the Russian Federation is provided. At the choice of the customer the technical support of the preset software is performed on the basis of independent service contracts or as a unit (by the principle of "one window"), and SLA can cover not only response to IT incidents, but also their solution. The principle of "one window" means that even at emergence of a particularly complex situation when it is difficult to define what software or what interaction of products causes problems, the customer will not throw from one technical support in another. Also will not force to solve, as a result, them independently. Instead of this ALP Group coordinates work of all three lines of technical support, including appeals to own Competence Center on import substitution and Open Source. And transfer of the requests requiring the expert level of knowledge, to software developers. For the first time this scheme of interaction was implemented by ALP Group and BaseALT during creation of the open bus of technical support of the Russian software. Then this support extended to an import-dependent hardware platform of x86. On the system of "one window" are available to PAK'S users of advantage of technical support also on Elbrusakh.

Customers can also use a number of additional services of ALP Group which prevent unjustified expenses and also simplify implementation and maintenance of PACK ICES. Among them:

• determination of optimal number of PACK ICES for the plan of migration of the customer on import-independent software;
• change management of the IC (including, at implementation or change of settings of PACK ICES);
• PAK'S connection "The import-independent domain controller with advanced functionality, compatible to AD" to the expert service of monitoring and status monitoring of the IC (STsMK "Argus") allowing to prevent proactively up to 80% of IT incidents.