• Troubleshooting a multiprotocol configuration

    PDF

    Troubleshooting a multiprotocol configuration

    Service commands for troubleshooting a multiprotocol configuration

    The following service commands are useful for troubleshooting access issues in a multiprotocol configuration. For detailed information about the service commands, see the Service Commands Technical Notes.

    Use case
    Service command
    Obtain information about network connectivity to domain controllers as well as access rights, credentials, access logs, and so forth.
    server_cifssupport
    Audit the current connection between the SMB client and domain controller.
    svc_cifssupport -builtinclient
    Run an internal test to hep find the root cause of potential configuration or environmental errors.
    svc_cifssupport -checkup
    Troubleshoot user access control by listing list user credentials as seen from the SMB server cache.
    svc_cifssupport -cred
    Obtain information on the global policy objects applied to the SMB server.
    svc_cifssupport -gpo
    Enable a log of user or machine logon attempts.
    svc_cifssupport -logontrace
    Check the authentication of a given user to an SMB server.
    svc_cifssupport -lsarpc
    Tests the network logon to an SMB server.
    svc_cifssupport -nltest
    Display domain controller information for a given SMB server.
    svc_cifssupport -pdcdump
    Attempt to connect to the SMB domain controller from a given SMB server.
    svc_cifssupport -pingdc
    Obtain the group membership of a given user from the SMB domain controller.
    svc_cifssupport -samr
    Access the Secure Mapping database, which acts as a cache mechanism to relate Windows SIDs to Unix UIDs.
    svc_cifssupport -secmap