true parrot
I have an older unit running on Ontap 8.2.5. It's linked to our Active Directory and I want to see for a given user the groups memberships.
I know that on 9.x.y that I'm also running, I would just do
diag secd authentication show-creds -node MYNODE -vserver MYVSERVER -win-name WORKGROUP\USERNAME
but I can't find anything like this with 8.2.5
vague musk
8.2.5 is 7 mode, I think you want useradmin domainuser list -g group_name
Also fyi Microsoft is releasing a patch for Active Directory in June which will break domain auth on 7 mode in July. We do not plan to provide any updates for 7 mode to resolve this.
true parrot
Thank you for your help.
I got
Could not list user(s). Error: Group does not exist
Which is weirder than weird... I tried DOMAIN\groupname and groupname. I tried to find how I can list all groups from a domain, but could only find local groups with useradmin group list. Also trying to look with a specific user, something with cifs lookup but all I get is a SID
(sorry for this late reply, I was away last week)
(also, thanks a lot for the Active Directory patch warning! Much appreciated)
slim ibex
in 7-mode you use wcc to do what diag secd show-creds does. so wcc -s DOM\username (wcc -h or man wcc or something similar should show some help for the command)
true parrot
Thank you so much! This is exactly what I wanted and I now understand what's wrong with some users access. I guess this can be closed?
vague musk
thanks! Glad we could help. I misread as wanting to know users from group, but @slim ibex has my back 😉
true parrot
I do have one problem then but it's not about how to check memberships so I'm going to look into it if I can fix it, I'm not even sure it's related to our NetApp and I guess I'll open another thread if it ends up related 🙂 Thanks again!