Testing the Password Synchronization
You can use the test_sync tool, located in the /etc/pam_CA_eta folder, to verify that the password update of a local account is effectively propagated by the Provisioning Server. A sample command line entry follows:
/etc/pam_CA_eta/test_sync <user> <password> [config=/path/to/config_file]
An example session follows:
# /etc/pam_CA_eta/test_sync pam002 newpass1234 Identity Manager password synchronization started. :ETA_S_0245<MGU>, Global User 'pam002' and associated account passwords updated successfully: (accounts updated: 2, unchanged: 0, failures: 0) Identity Manager password synchronization succeeded. /etc/pam_CA_eta/test_sync: succeeded Trace file is /tmp/test_sync-trace.2244
As the command output shows, a trace file was generated which contains all of the details of the configuration file parsing, the connection to the Provisioning Server, and the update of the account.
When using the verbose mode (by using the default verbose yes parameter in the configuration file), the command provides informational and potential error messages about the password propagation.
Copyright © 2011 CA. All rights reserved. | Email CA Technologies about this topic |