Chapter 29 Authentication Objects

29.3 test aaa Command

The following table lists the test aaa command you use to teat a user account on an authentication server.

Table 114 test aaa Command

COMMAND

DESCRIPTION

test aaa {serversecure-

Tests whether a user account exists on the specified

server} {adldap} host

authentication server.

{hostnameipv4-address}

 

[host {hostnameipv4-

 

address}] port <1..65535>

 

base-dnbase-dn-string

 

[bind-dnbind-dn-string

 

password password] login-

 

name-attribute attribute

 

[alternative-login-name-

 

attribute attribute]

 

account account-name

 

29.3.1 Test a User Account Command Example

The following example shows how to test whether a user account named userABC exists on the AD authentication server which uses the following settings:

IP address: 172.16.50.1

Port: 389

Base-dn: DC=ZyXEL,DC=com

Bind-dn: zyxel\engineerABC

Password: abcdefg

Login-name-attribute: sAMAccountName

The result shows the account exists on the AD server. Otherwise, the NXC returns an error.

Router> test aaa server ad host 172.16.50.1 port 389 base-dn DC=ZyXEL,DC=com bind-dn zyxel\engineerABC password abcdefg login-name-attribute sAMAccountName account userABC

dn:: Q049MTIzNzco546L5aOr56uRKSxPVT1XaXRoTWFpbCxEQz1aeVhFTCxEQz1jb20=

objectClass: top

objectClass: person

objectClass: organizationalPerson

objectClass: user

cn:: MTIzNzco546L5aOr56uRKQ==

sn: User

l: 2341100

--------------------------SNIP!--------------------------------------------

 

195

NXC CLI Reference Guide