Using dzdump

The dzdump command line program enables you to view and capture the current content of the authorization cache. You can use command line options to control the information contained in the output for the command.

The syntax for the dzdump command is:

dzdump [/d [directory-path] ] [/w=screen-width] [/s] [/n] [/g] [/l] [/a]
[/r] [/i] [/t] [/z] [/u] [/h]

If you specify no command line arguments, the dzdump command returns complete in‑memory information from the authorization agent (dzagent) cache. You can use the following command line arguments to refine the output for the command:

Use this option	To do this
`/d`	Dump cache files from the default location or a specified location. You can use this option with a directory path to dump cache files from a specified location. For example, to dump cache files from the directory `C:\AcmeAZstore:/d=C:\AcmeAZstore` Note that you cannot use the `/d` option to dump cache files directly on a computer where the Centrify Agent for Windows is currently running. However, you create a copy of the cache, then dump the cache from the saved copy. For example, copy all files in the cache directory—the default location for cache directory is `c:\ProgramData\Centrify\DirectAuthorize\Cache`—to a temporary directory. You can then dump the authorization cache by running `dzdump` and specifying the temporary location.
`/w`	Use the specified `screen-width` for word-wrapping the command output. If you don’t specify this options, the default screen width is 80 characters. To disable word-wrapping of the command output, specify a `screen-width` of zero. For example: `/w=0`
`/s`	Display security identifier (SID) mappings
`/n`	Display name mappings
`/g`	Display assignee mappings
`/l`	Display assignments in the joined zone hierarchy
`/a`	Display assignments for security identifiers (SID)
`/r`	Display role definitions
`/i`	Display right definitions
`/t`	Display access token information
`/z`	Display zone hierarchy
`/u`	Display recent user logon activity
`/h`	Displays the command help

You can use any combination of display options to display only the information of interest. If you do not specify any display options, the dzdump command displays all of the information in the authorization cache.

You must be logged on as a local administrator to run the dzdump command. You should note that the command output from a dzdump command can contain sensitive information. You should only use the dzdump command if Centrify Support recommends you do so.

Depending on the display options you specify, the command returns detailed information about the authorization cache.