Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 

show services user-identification active-directory-access statistics

 

Syntax

Release Information

Command introduced in Junos OS Release 12.1X47-D10.

Description

Display statistics about IP address-to-user mapping, user-to-group mapping, and IP user probes used for the integrated user firewall feature. If two domains are configured, output is provided per domain.

Options

  • ip-user-mapping—Number of total queries and failed queries to the event log on the domain controller for address-to-user mappings. Includes additional information, such as the log scan interval and the timestamp of the last event read.

  • ip-user-probe—Number of total PC probes and failed probes.

  • user-group-mapping—Number of total queries and failed queries to the LDAP server for user-to-group mappings

  • domain name—(Optional) Display the statistics for the specified domain.

Required Privilege Level

view

List of Sample Output

show services user-identification active-directory-access statistics ip-user-mapping

show services user-identification active-directory-access statistics ip-user-probe

show services user-identification active-directory-access statistics user-group-mapping

Output Fields

Table 1 lists the output fields for the show services user-identification active-directory-access statistics ip-user-mapping command.

Table 1: show services user-identification active-directory-access statistics ip-user-mapping Output Fields

Field Name

Field Description

Host

IP address of the domain controller.

Initial event log timespan

When the feature is first deployed, the number of previous hours for which the event log on the domain controller is read. A one means the last hour of the event log is read.

Eventlog scan interval

Number of seconds between event log scans.

Total log query number

Count of the queries on the event log.

Failed log query number

Count of the failed queries on the event log.

Log read number

Count of the times the event log was read.

Latest timestamp

Year:month:date:hours:minutes:seconds is the timestamp taken from the event log. Timestamp records the latest statistics updated time of the SRX Series devices.

Table 2 lists the output fields for the show services user-identification active-directory-access statistics ip-user-probe command.

Table 2: show services user-identification active-directory-access statistics ip-user-probe Output Fields

Field Name

Field Description

Total user probe number

Count of the probes of IP addresses to get IP address-to-user mappings.

Failed user probe number

Count of failed probe attempts.

Table 3 lists the output fields for the show services user-identification active-directory-access statistics user-group-mapping command.

Table 3: show services user-identification active-directory-access statistics user-group-mapping Output Fields

Field Name

Field Description

Host

IP address and port being queried.

Total query number

Count of queries.

Failed query number

Count of failed query attempts.

Sample Output

show services user-identification active-directory-access statistics ip-user-mapping

user@host> show services user-identification active-directory-access statistics ip-user-mapping

Sample Output

show services user-identification active-directory-access statistics ip-user-probe

user@host> show services user-identification active-directory-access statistics ip-user-probe

Sample Output

show services user-identification active-directory-access statistics user-group-mapping

user@host> show services user-identification active-directory-access statistics user-group-mapping