protocol domain-auth test delegation server-privs
Tests the delegation privileges for a server.
Syntax
protocol domain-auth test delegation server-privs domain <domain> server <server> server-ip <server-ip> service {cifs | exchangeMDB} [enduser <enduser>]
Parameters
domain <domain> | Specifies the delegation domain in which you want to make the delegate user a trusted member, as in the following example: SIGNING.TEST |
server <server> | Specifies a delegate server hostname. |
server-ip <server-ip> | Specifies the delegate server IP address. |
service | Specifies a service: • cifs - CIFS service • exchangeMDB - Exchange service |
enduser <enduser> | Specifies the end username used on the client. The default end user is the delegate user. |
Usage
Within SMB signing, SMB2/3 signing, and encrypted MAPI in delegation mode, the SteelHead and the AD environment must have correct privileges to obtain Kerberos tickets for the CIFS or exchange server and perform the subsequent authentication.
This command tests whether correct privileges are set to perform constrained delegation.
Example
amnesiac (config) # protocol domain-auth test delegation server-privs domain delegation.test server exchange01 server-ip 10.2.3.4 service exchangeMDB
Product
SteelHead CX, SteelHead EX, SteelHead-v, SteelHead-c
Related Commands