CLI Guide

NOTE: In the event of an error, the command displays
the test that failed, all the tests performed earlier to the
test that failed, and all the error messages.
Synopsis
testfeature -f ad -u <username> -p
<password>
[-d <diagnostic-message-level>]
Example • testfeature –f ad –u user@domain –p secret
SUCCESSFUL: User permissions are xxxxxppp.
The last three digits are the user's permissions.
• testfeature –f adkrb –u
user_name@domain_name
SUCCESSFUL: User permissions are 80000fff.
• testfeature -f ldap -u harold -p barrel
SUCCESSFUL: User permissions are 0x00000fff.
Table 138. testfeature -f adkrb
Description Tests the Active Directory configuration using the Kerberos
authentication (single sign-on or Smart Card login). Use the
optional -d switch to obtain additional diagnostic information, as
needed. This subcommand, when run, performs the following:
• Checks command syntax.
• Verifies if the required system resources are available.
• Validates Active Directory configuration.
• Verifies if the SSL certificate and certificate signing request
(key) exists.
• Acquires LDAP and Global Catalog Service records from DNS.
• Verifies if the CMC can acquire CMC, LDAP and Global Catalog
servers FQDN through reverse IP lookups.
• Verifies that the CMC principal name matches the principal
name in the uploaded Keytab file.
• Verifies that the CMC acquires a Kerberos TGT.
• Acquires user privileges from the Active Directory server.
• Checks the time to acquire user privileges with the allotted time
to login.
NOTE: In the event of an error, the command outputs all
tests performed up to and including the test that failed,
and all the error messages.
Synopsis
testfeature -f adkrb -u <username> [-d
<diagnostic-message-level>]
Table 139. testfeature -f ldap
Description Tests LDAP configuration and operation, and reports success as
each stage of the authentication process proceeds. After
successful completion, this command prints the CMC privileges
assumed by the specified <username>.
If a failure occurs, the command stops with an error message that
displays the required corrective action. Use the optional -d switch
to obtain additional diagnostic information, as needed.
RACADM Subcommand Details 111