ONTAP 9.14.1 commands

vserver active-directory show

Display Active Directory accounts

Availability: This command is available to cluster and Vserver administrators at the admin privilege level.

Description

The vserver active-directory show command displays information about Active Directory accounts. The command output depends on the parameter or parameters specified with the command. If you do not specify any parameters, the command displays the following information about all Active Directory accounts:

  • Vserver name

  • Active Directory account NetBIOS name

  • Domain or workgroup name

You can specify the -fields parameter to specify which fields of information to display about Active Directory accounts. You can use –fields`? to display the valid values for the `–fields parameter. In addition to the fields above, you can display the following fields:

  • Fully-qualified domain name

  • Organizational unit

You can specify additional parameters to display only information that matches those parameters. For instance, to display information only about Active Directory accounts that are in the Windows Active Directory domain named RUBY , run the command with the value of the -domain-workgroup parameter set to RUBY .

You can specify the -instance parameter to display all information for all Active Directory accounts in list form.

Parameters

{ [-fields <fieldname>,…​]

If you specify the -fields <fieldname>, …​ parameter, the command only displays the fields that you specify.

| [-instance ] }

If you specify the -instance parameter, the command displays detailed information about all entries.

[-vserver <vserver>] - Vserver

If you specify this parameter, the command displays information only about the Active Directory account for the specified Vserver.

[-account-name <NetBIOS>] - Active Directory NetBIOS Name

If you specify this parameter, the command displays information only for the Active Directory accounts that match the specified NetBIOS account name.

[-domain-workgroup <CIFS domain>] - NetBIOS Domain/Workgroup Name

If you specify this parameter, the command displays information only for the Active Directory accounts that are in the specified NetBIOS domain or workgroup.

Workgroups are not supported in this release.
[-domain <TextNoCase>] - Fully Qualified Domain Name

If you specify this parameter, the command displays information only for the Active Directory accounts that are in the specified domain.

[-ou <text>] - Organizational Unit

If you specify this parameter, the command displays information only for the Active Directory accounts that are in the specified organizational unit.

[-auth-style {domain|workgroup|realm}] - Authentication Style

If you specify this parameter, the command displays information only for the Active Directory accounts that are in the specified authentication style.

Examples

The following example displays a subset of the information about all Active Directory accounts.

cluster1::> vserver active-directory show
Account     Domain/Workgroup
 Vserver        Name        Name
 -------------- ----------- ----------------
 vs1            ADSERVER1   EXAMPLE

The following example displays all information about all Active Directory Vservers in list form.

cluster1::> vserver active-directory show -instance
Vserver: vs1
            Active Directory account NetBIOS Name: ADSERVER1
                    NetBIOS Domain/Workgroup Name: EXAMPLE
                      Fully Qualified Domain Name: EXAMPLE.COM
                              Organizational Unit: CN=Computers
Top of Page