Commands available for users

Many of the Centrify command-line programs require root privileges because they enable you to perform administrative tasks or operations that must be kept secure. In some cases, commands support different options or produce different results if run using an administrative account than when run using a standard user account.

The following table displays a brief description of the commands you can run when you are logged on as a standard user without elevated privileges.

Use this command To do this
adcheck

Check the operating system, network, and Active Directory connections to verify that a computer is ready to join an Active Directory domain.

The syntax for the adcheck program is:

adcheck domain_name [options]

The domain_name should be a fully-qualified domain name.

adfinddomain

Display the domain controller associated with the Active Directory domain you specify.

The syntax for the adfinddomain program is:

adfinddomain [options] domain_name
adgpupdate

Retrieve group policies from the Active Directory domain controller and apply the policy settings to the local computer and current user immediately.

The syntax for the adgpupdate program is:

adgpupdate [options]
adid

Display the real and effective UIDs and GIDs for the current user or a specified user.

The syntax for the adid program is:

adid [option] [username|uid]
adinfo

Display detailed Active Directory, network, and diagnostic information for a local computer. Options control the type of information and level of detail displayed.

The syntax for the adinfo program is:

adinfo [options] [--user username[@domain]] [--password password]
adlicense

Display the current status of agent features on the local computer. Agent features can be licensed or express if unlicensed.

adpasswd

Change your Active Directory password.

After you change your password, you must use the new password for all activities that are authenticated through Active Directory, including logging on to the UNIX shell, logging on to Windows computers, and accessing applications on both UNIX and Windows computers.

adquery

Query Active Directory for information about users and groups.

This command is provided for backward compatibility. In most cases, you should use ADEdit (adedit) commands or scripts to perform administrative tasks in Active Directory from Linux or UNIX computers.

The syntax for the adquery program is as follows:

adquery user|group [options] [username|groupname]
adsetgroups

View or change the list of groups of which you are a member.

The syntax for the adsetgroups program is:

adsetgroups [options] group
adsmb

Perform file operations, such as get a file, write a file, or display the contents of a directory using the Centrify smb stack.

The syntax for the adsmb program is:

adsmb file_operation -s share [options]

The valid file_operations are get, getnew, put, putnew, dir, delete, mkdir, and rmdir.

dzdo

Execute a privileged command as root or another specified user.

The syntax for using the dzdo program is:

dzdo [options]
dzinfo

Display detailed information about the configuration of rights and roles for one or more specified users on the local computer. If you do not specify a user, the command returns information for the currently logged on user.

The syntax for the dzinfo command is:

dzinfo [options]
dzsh

Run commands in a restricted environment shell. This shell is a customized Bourne shell that provides environment variables, job control, command history, and access to specific commands defined by roles.

For information about the additional commands available if you have root or root-equivalent privileges on a computer, see the Administrator’s Guide for Linux and UNIX or the Centrify Command Reference Guide.