Skip to main content

vserver services access-check authentication show-creds

Display a user's credentials based on a UNIX UID or Windows SID

Availability: This command is available to cluster administrators at the advanced privilege level.

Description

The vserver services access-check authentication show-creds command returns the credentials for a Windows user using SID, a Windows user using a Windows username, a UNIX user using UID, or a UNIX user using a UNIX user name. This command is useful for retrieving information such as account type, SIDs, UIDs, GIDs, privileges, and domain or group membership.

Parameters

[-node {<nodename>|local}] - Node
The name of the node on which the command is executed.
-vserver <vserver> - Vserver
The command displays information for the specified Vserver.
{ -uid <integer> - UID
The UNIX user's UID.
| -sid <text> - SID
The Windows user's SID.
| -unix-user-name <text> - Unix User Name
The UNIX username.
| -win-name <text>} - Windows Name
The Windows username.
[-list-name {true|false}] - Display Translated Names
If this parameter is specified, the command displays information as translated names.
[-list-id {true|false}] - Display IDs
If this parameter is specified, the command displays information as IDs.
[-clientIp <IP Address>] - Client IP Address
The IP address of the client as specified by the user

Examples

This example returns credential information for UNIX user with UID "0" on node "node1" for Vserver "vs1."

cluster1::* vserver services access-check authentication show-creds -node node1 -vserver vs1 -uid 0
(vserver services access-check authentication show-creds)

UNIX UID: root Windows User: CIFSQA\Administrator (User)

GID: root
Supplementary GIDs: None

Windows Membership:
CIFSQA\Schema Admins (Domain group)
CIFSQA\Enterprise Admins (Domain group)
CIFSQA\Domain Admins (Domain group)
CIFSQA\Domain Users (Domain group)
CIFSQA\Group Policy Creator Owners (Domain group)
BUILTIN\Administrators (Alias)
BUILTIN\Users (Alias)
User is also a member of Everyone, Authenticated Users, and Network Users

Privileges (0x2b7):
SeBackupPrivilege
SeRestorePrivilege
SeTakeOwnershipPrivilege

This example returns credential information for UNIX user with UID "0" on node "node1" for Vserver "vs1" when list-name "false" and list-id "true."
cluster1::* vserver services access-check authentication show-creds -node node1 
-vserver vs1 -uid 0 -list-name false -list-id true
(vserver services access-check authentication show-creds)

UNIX UID: 0 Windows User: S-1-5-21-1407423728-2963865486-1834115207-500

GID: 0
Supplementary GIDs: None

Windows Membership:
S-1-5-21-1407423728-2963865486-1834115207-518
S-1-5-21-1407423728-2963865486-1834115207-519
S-1-5-21-1407423728-2963865486-1834115207-512
S-1-5-21-1407423728-2963865486-1834115207-513
S-1-5-21-1407423728-2963865486-1834115207-520
S-1-5-32-544
S-1-5-32-545
User is also a member of S-1-1-0, S-1-5-11, and S-1-5-2

Privileges (0x2b7):
SeBackupPrivilege
SeRestorePrivilege
SeTakeOwnershipPrivilege

This example returns credential information for UNIX user with UID "0" on node "node1" for Vserver "vs1" when list-name "true" and list-id "true."
cluster1::* vserver services access-check authentication show-creds -node node1 
-vserver vs1 -uid 0 -list-name false -list-id true
(vserver services access-check authentication show-creds)

UNIX UID: 0 (root) Windows User: S-1-5-21-1407423728-2963865486-1834115207-500 (CIFSQA\Administrator (User))

GID: 0 (root)
Supplementary GIDs: None

Windows Membership:
S-1-5-21-1407423728-2963865486-1834115207-518 CIFSQA\Schema Admins (Domain group)
S-1-5-21-1407423728-2963865486-1834115207-519 CIFSQA\Enterprise Admins (Domain group)
S-1-5-21-1407423728-2963865486-1834115207-512 CIFSQA\Domain Admins (Domain group)
S-1-5-21-1407423728-2963865486-1834115207-513 CIFSQA\Domain Users (Domain group)
S-1-5-21-1407423728-2963865486-1834115207-520 CIFSQA\Group Policy Creator Owners (Domain group)
S-1-5-32-544 BUILTIN\Administrators (Alias)
S-1-5-32-545 BUILTIN\Users (Alias)
User is also a member of Everyone, Authenticated Users, and Network Users

Privileges (0x2b7):
SeBackupPrivilege
SeRestorePrivilege
SeTakeOwnershipPrivilege

This example returns credential information for UNIX user with UID "0" on node "node1" for Vserver "vs1" when list-name "true" and list-id "false."
cluster1::* vserver services access-check authentication show-creds -node node1 
-vserver vs1 -uid 0 -list-name true -list-id false
(vserver services access-check authentication show-creds)

UNIX UID: root Windows User: CIFSQA\Administrator (User)

GID: root
Supplementary GIDs: None

Windows Membership:
CIFSQA\Schema Admins (Domain group)
CIFSQA\Enterprise Admins (Domain group)
CIFSQA\Domain Admins (Domain group)
CIFSQA\Domain Users (Domain group)
CIFSQA\Group Policy Creator Owners (Domain group)
BUILTIN\Administrators (Alias)
BUILTIN\Users (Alias)
User is also a member of Everyone, Authenticated Users, and Network Users

Privileges (0x2b7):
SeBackupPrivilege
SeRestorePrivilege
SeTakeOwnershipPrivilege