USER-ID debug logs

[Tician]

Hi,

I saw several articles which describe agentless user-id debugging and all show different ways (commands and output files), so I'm not sure which way is right and how to debug and see user login, logout and group mapping process for agentless user-id...I'll be very appreciate if someone share this information! 

[reaper · Accepted solution]

Hi

Depending on the issue you are trying to investigate some commands will be more useful than others

a good place to start is by looking in the debug logging, this will probably contain most of the information you're after:

> debug user-id on debug
> less mp-log useridd.log

when you're done don't forget to set debug level to a lower setting

> debug user-id on info

several show commands will come in handy to see if all the mappings/groups are working fine

> show user server-monitor state all
> show user server-monitor statistics
> show user user-IDs 
> show user ip-user-mapping all
> show user group list
> show user group name <name>
> show user group-mapping state all

and some further debug commands:

to get a listing of all users

> debug user-id dump idmgr type user all

to get a listing of all groups:

> debug user-id dump idmgr type user-group all

you can also try resetting/clearing mapping if you need to manually refresh all the mappings (if the automatic update is failing or during troubleshooting)

> debug user-id reset group-mapping all
> debug user-id refresh group-mapping all

> clear user-cache all
> clear user-cache-mp all