Reference Guide

Option Description
-u <username> The user name specified in an appropriate format for the
selected authentication method. That is, Active Directory
users are specified as user_name@domain_name.
-p <password> The password for the indicated user account.
-d <bitmask> A bitmask (specified as a hexadecimal value) to select various
diagnostic messaging levels. This option is optional.
NOTE: -d option is not supported with the remote racadm
interface.
testfeature -f ad
Description
Tests Active Directory configuration using simple
authentication (user name and password). Use the optional
-d switch to obtain additional diagnostic information, as
needed.
This subcommand when executed performs the following:
● Checks command syntax.
● Verifies whether the required system resources are
available.
● Validates Active Directory configuration.
● Verifies the SSL certificate and if the certificate signing
request (key) exists.
● Acquires LDAP and Global Catalog Service records from
DNS.
● Acquires user privileges from the Active Directory server.
● Checks the time to acquire user privileges with the allotted
time to login.
NOTE: In the event of an error, the command displays the
test that failed, all the tests performed earlier to the test
that failed, and all the error messages.
Synopsis
testfeature -f ad -u <username> -p
<password>
[-d <diagnostic-message-level>]
Example
● testfeature –f ad –u user@domain –p secret
SUCCESSFUL: User permissions are xxxxxppp.
The last three digits are the user's permissions.
● testfeature –f adkrb –u
user_name@domain_name
SUCCESSFUL: User permissions are 80000fff.
● testfeature -f ldap -u harold -p barrel
SUCCESSFUL: User permissions are
0x00000fff.
testfeature -f adkrb
Description
Tests the Active Directory configuration using the Kerberos
authentication (single sign-on or Smart Card login). Use the
optional -d switch to obtain additional diagnostic information,
RACADM Subcommand Details 111