Dell Chassis Management Controller Version 1.3 for PowerEdge FX2/FX2s RACADM Command Line Reference Guide

-f < feature>

Specifies the feature name. testfeature supports the following features:

• ad — Tests Active Directory configuration using simple authentication (user name and password).
• adkrb — Tests Active Directory configuration using the Kerberos authentication.
• ldap — Tests LDAP configuration and operation (requires user name and password).

-u < username >

The user name specified in an appropriate format for the selected authentication method. That is, Active Directory users are specified as user_name@domain_name.

-p < password >

The password for the indicated user account.

-d < bitmask >

A bitmask (specified as a hexadecimal value) to select various diagnostic messaging levels. This option is optional.

Description

Tests Active Directory configuration using simple authentication (user name and password). Use the optional -d switch to obtain additional diagnostic information, as needed.

This subcommand when executed performs the following:

• Checks command syntax.
• Verifies whether the required system resources are available.
• Validates Active Directory configuration.
• Verifies the SSL certificate and if the certificate signing request (key) exists.
• Acquires LDAP and Global Catalog Service records from DNS.
• Acquires user privileges from the Active Directory server.
• Checks the time to acquire user privileges with the allotted time to login.

Synopsis

testfeature -f ad -u <
                                                username> -p <
                                                password> [-d <
                                                diagnostic-message-level>]
                                             

Example

• testfeature –f ad –u user@domain –p secret

  SUCCESSFUL: User permissions are xxxxxppp.

  The last three digits are the user's permissions.

• testfeature –f adkrb –u user_name@domain_name

  SUCCESSFUL: User permissions are 80000fff.

• testfeature -f ldap -u harold -p barrel

  SUCCESSFUL: User permissions are 0x00000fff.

Description

Tests the Active Directory configuration using the Kerberos authentication (single sign-on or Smart Card login). Use the optional -d switch to obtain additional diagnostic information, as needed. This subcommand, when run, performs the following:

• Checks command syntax.
• Verifies if the required system resources are available.
• Validates Active Directory configuration.
• Verifies if the SSL certificate and certificate signing request (key) exists.
• Acquires LDAP and Global Catalog Service records from DNS.
• Verifies if the CMC can acquire CMC, LDAP and Global Catalog servers FQDN through reverse IP lookups.
• Verifies that the CMC principal name matches the principal name in the uploaded Keytab file.
• Verifies that the CMC acquires a Kerberos TGT.
• Acquires user privileges from the Active Directory server.
• Checks the time to acquire user privileges with the allotted time to login.

Synopsis

testfeature -f adkrb -u <
                                                username> [-d <
                                                diagnostic-message-level>]
                                             

Description

Tests LDAP configuration and operation, and reports success as each stage of the authentication process proceeds. After successful completion, this command prints the CMC privileges assumed by the specified < username>.

If a failure occurs, the command stops with an error message that displays the required corrective action. Use the optional -d switch to obtain additional diagnostic information, as needed.

Synopsis

testfeature -f ldap -u <
                                                username> -p <
                                                password> [-d <
                                                diagnostic-message-level>]