Reference Guide

Checks the time to acquire user privileges with the allotted
time to login.
NOTE: In the event of an error, the command displays
the test that failed, all the tests performed earlier to the
test that failed, and all the error messages.
Synopsis
testfeature -f ad -u <username> -p <password>
[-d <diagnostic-message-level>]
Example
testfeature –f ad –u user@domain –p secret
SUCCESSFUL: User permissions are xxxxxppp.
The last three digits are the user's permissions.
testfeature –f adkrb –u
user_name@domain_name
SUCCESSFUL: User permissions are 80000fff.
testfeature -f ldap -u harold -p barrel
SUCCESSFUL: User permissions are
0x00000fff.
testfeature -f adkrb
Description Tests the Active Directory conguration using the Kerberos
authentication (single sign-on or Smart Card login). Use the
optional -d switch to obtain additional diagnostic information, as
needed. This subcommand, when run, performs the following:
Checks command syntax.
Veries if the required system resources are available.
Validates Active Directory conguration.
Veries if the SSL certicate and certicate signing request
(key) exists.
Acquires LDAP and Global Catalog Service records from
DNS.
Veries if the CMC can acquire CMC, LDAP and Global
Catalog servers FQDN through reverse IP lookups.
Veries that the CMC principal name matches the principal
name in the uploaded Keytab le.
Veries that the CMC acquires a Kerberos TGT.
Acquires user privileges from the Active Directory server.
Checks the time to acquire user privileges with the allotted
time to login.
NOTE: In the event of an error, the command outputs all
tests performed up to and including the test that failed,
and all the error messages.
Synopsis
testfeature -f adkrb -u <username> [-d
<diagnostic-message-level>]
testfeature -f ldap
Description
Tests LDAP conguration and operation, and reports success as
each stage of the authentication process proceeds. After
successful completion, this command prints the CMC privileges
assumed by the specied <username>.
102