Data gathered for authentication on Linux®

The following data is always obtained by the gpfs.snap command for any enabled protocol.

  1. The output of these commands:
    • mmcesuserauthlsservice
    • mmcesuserauthckservice --data-access-method all --nodes cesNodes
    • mmcesuserauthckservice --data-access-method all --nodes cesNodes --server-reachability
    • systemctl status ypbind
    • systemctl status sssd
    • lsof -i
    • sestatus
    • systemctl status firewalld
    • systemstl status iptables
    • net ads info
  2. The content of these files:
    • /etc/nsswitch.conf
    • /etc/ypbind.conf
    • /etc/idmapd.conf
    • /etc/krb5.conf
    • /etc/firewalld/*
    • /etc/sssd/sssd.conf (with password removed)
    • /var/log/sssd/*
    • /var/log/secure/*
    • /var/mmfs/etc/krb5_scale.keytab
    Files stored in the CCR:
    • NSSWITCH_CONF
    • YP_CONF
    • LDAP_TLS_CACERT
    • authccr