syncauthservice

Edit online

Use the syncauthservice command to synchronize certificates from the authentication service to the authentication service of another server. For change to take effect, csmAuth needs to be restarted on the destination server.

Syntax

Note: This command can only be issued by a user with Administrator authority.

Parameters

-help | -h | -?: Lists help for the command. If you specify additional parameters and arguments, those parameters and arguments are ignored.
-server server: Specifies the server IP address or hostname and IP port. This will be the server to synchronize the authentication service to. The input format is servername:port, for example, csm.ibm.com:9560. The input format for an IPv6 address with port is [IPv6 address]:port, for example, [0:0:0:0:0:0:0:1]:9560. The IP port is optional. If no port is provided, it will default to the same port that the CLI connection is using.
Note: If you want to synchronize from Copy Services Manager on the DS8000 HMC to another server that has a different CLI port, you might first have to unblock the firewall for that port.
-username user: Specifies the user name to use to connect to the other server. This user will be used to establish the connection to synchronize the authentication service certificates. This user should have administrative authority on the destination server.
-password password: Specifies the password of the user specified with username parameter. To hide the password, call the command without this option. The command will prompt for the password which will not be echoed.
-quiet: Suppresses the confirmation prompt for this command. This flag answers yes to all confirmation prompts.

Example: Synchronizing authentication service certificates to another server

csmcli> syncauthservice -server csm.ibm.com -username csmadmin

The following output is returned:

Please enter a password:
>
Are you sure you want to overwrite the certificates of another authentication
service? [y/n]:y

IWNR4980I [Dec 20, 2016 10:30:07 AM] Successfully synchronized authentication
service certificate to server csm.ibm.com. The csmAuth server needs
to be restarted on csm.ibm.com for changes to take effect.

Example: Synchronizing authentication service certificates to another server using an alternate port

csmcli> syncauthservice -server csm.ibm.com:1234 -username csmadmin -password
passw0rd -quiet

The following output is returned:

IWNR4980I [Dec 20, 2016 10:31:51 AM] Successfully synchronized authentication
service certificate to server csm.ibm.com. The csmAuth server needs
to be restarted on csm.ibm.com for changes to take effect.