testldapserver

Use the testldapserver command to test a Lightweight Directory Access Protocol (LDAP) server.

Syntax

Read syntax diagramSkip visual syntax diagram testldapserver -usernameuser_name-password'password'ldap_server_idldap_server_name

Parameters

-delim delimiter
(Optional) Specify a delimiter to separate data in the output.
-nohdr
(Optional) Suppress the headings in the output.
-username user_name
(Optional) Specifies the user name to test.
-password 'password'
(Optional) Specifies the password to test. You can optionally specify the password with this parameter. You must enclose the password in single quotation marks. If you do not specify the password, the system prompts you for it before running the command and does not display the password that you type. Do not enclose the password in single quotation marks if you use the prompt.
Note: The -password parameter is only valid if -username is specified. The actual password does not need to be supplied.
ldap_server_id|ldap_server_name
(Optional) Specifies the LDAP server ID or name to test.

Description

The testldapserver command allows three levels of testing:
  • Server connection test (issue testldapserver without supplying username or password). This verifies that a connection can be established with the server while authenticating using the configured administrator credentials according to the LDAP configuration.
  • Server connection, LDAP configuration, and user authorization test (issue testldapserver with a username). This verifies that:
    • A connection can be established with the server while authenticating using the configured administrator credentials.
    • The LDAP attributes are correctly configured on the system.
    • The user has been assigned a role.
  • Server connection, LDAP configuration, and user authentication test (issue testldapserver with a username and password). This verifies that:
    • A connection can be established with the server while authenticating using the configured administrator credentials.
    • The user authenticates with the supplied password

No specific server errors indicates success.

Important: This command works whether or not LDAP authentication is selected or enabled with the chauthservice command.
This table provides the attribute values that can be displayed as output view data.
Table 1. testldapserver attribute values
Attribute Value
id LDAP server ID
name LDAP server name
error Critical server error (or success, depending on situation) encountered

An invocation example with one LDAP server and no specific user information

testldapserver -delim ":" ldapserver1

The resulting output: 

id:name:error
1:ldapserver1:CMMVC7075I The LDAP task completed successfully