ONTAP 9.12.1 commands

50←PDF
  • ONTAP 9.12.1 commands(CA08871-263en.pdf)
  • vserver active-directory show

    Display Active Directory accounts

    Availability: This command is available to cluster and Vserver administrators at the admin privilege level.

    Description

    The vserver active-directory show command displays information about Active Directory accounts. The command output depends on the parameter or parameters specified with the command. If you do not specify any parameters, the command displays the following information about all Active Directory accounts:

    • Vserver name

    • Active Directory account NetBIOS name

    • Domain or workgroup name

    You can specify the -fields parameter to specify which fields of information to display about Active Directory accounts. You can use –fields`? to display the valid values for the `–fields parameter. In addition to the fields above, you can display the following fields:

    • Fully-qualified domain name

    • Organizational unit

    You can specify additional parameters to display only information that matches those parameters. For instance, to display information only about Active Directory accounts that are in the Windows Active Directory domain named RUBY , run the command with the value of the -domain-workgroup parameter set to RUBY .

    You can specify the -instance parameter to display all information for all Active Directory accounts in list form.

    Parameters

    { [-fields <fieldname>,…​]

    If you specify the -fields <fieldname>, …​ parameter, the command only displays the fields that you specify.

    | [-instance ] }

    If you specify the -instance parameter, the command displays detailed information about all entries.

    [-vserver <vserver>] - Vserver

    If you specify this parameter, the command displays information only about the Active Directory account for the specified Vserver.

    [-account-name <NetBIOS>] - Active Directory NetBIOS Name

    If you specify this parameter, the command displays information only for the Active Directory accounts that match the specified NetBIOS account name.

    [-domain-workgroup <CIFS domain>] - NetBIOS Domain/Workgroup Name

    If you specify this parameter, the command displays information only for the Active Directory accounts that are in the specified NetBIOS domain or workgroup.

    Workgroups are not supported in this release.
    [-domain <TextNoCase>] - Fully Qualified Domain Name

    If you specify this parameter, the command displays information only for the Active Directory accounts that are in the specified domain.

    [-ou <text>] - Organizational Unit

    If you specify this parameter, the command displays information only for the Active Directory accounts that are in the specified organizational unit.

    [-auth-style {domain|workgroup|realm}] - Authentication Style

    If you specify this parameter, the command displays information only for the Active Directory accounts that are in the specified authentication style.

    Examples

    The following example displays a subset of the information about all Active Directory accounts.

    cluster1::> vserver active-directory show
    Account     Domain/Workgroup
     Vserver        Name        Name
     -------------- ----------- ----------------
     vs1            ADSERVER1   EXAMPLE

    The following example displays all information about all Active Directory Vservers in list form.

    cluster1::> vserver active-directory show -instance
    Vserver: vs1
                Active Directory account NetBIOS Name: ADSERVER1
                        NetBIOS Domain/Workgroup Name: EXAMPLE
                          Fully Qualified Domain Name: EXAMPLE.COM
                                  Organizational Unit: CN=Computers
    Top of Page