You can use the test_sync tool, located in the /etc/pam_CA_eta folder, to verify that the password update of a local account is effectively propagated by the Provisioning Server. A sample command line entry follows:
/etc/pam_CA_eta/test_sync <user> <password> [config=/path/to/config_file]
An example session follows:
# /etc/pam_CA_eta/test_sync pam002 newpass1234 CA IdentityMinder password synchronization started. :ETA_S_0245<MGU>, Global User 'pam002' and associated account passwords updated successfully: (accounts updated: 2, unchanged: 0, failures: 0) CA IdentityMinder password synchronization succeeded. /etc/pam_CA_eta/test_sync: succeeded Trace file is /tmp/test_sync-trace.2244
As the command output shows, a trace file was generated which contains all of the details of the configuration file parsing, the connection to the Provisioning Server, and the update of the account.
When using the verbose mode (by using the default verbose yes parameter in the configuration file), the command provides informational and potential error messages about the password propagation.
Copyright © 2013 CA.
All rights reserved.
|
|