3 warnings...
# /usr/share/centrifydc/bin/adcheck mtips.xxx.local
OSCHK : Verify that this is a supported OS : Pass
PATCH : Linux patch check : Pass
PERL : Verify perl is present and is a good version : Pass
SAMBA : Inspecting Samba installation : Pass
SPACECHK : Check if there is enough disk space in /var /usr /tmp : Pass
HOSTNAME : Verify hostname setting : Pass
NSHOSTS : Check hosts line in /etc/nsswitch.conf : Pass
DNSPROBE : Probe DNS server 10.254.3.100 : Pass
DNSPROBE : Probe DNS server 10.254.3.101 : Pass
DNSPROBE : Probe DNS server 8.8.8.8 : Pass
DNSCHECK : Analyze basic health of DNS servers : Pass
WHATSSH : Is this an SSH that DirectControl works well with : Pass
SSH : SSHD version and configuration : Warning
: You are running OpenSSH_6.6.1p1, OpenSSL 1.0.1e-fips 11 Feb 2013.
:
: This version of OpenSSH does not seem to be configured for PAM,
: ChallengeResponse and Kerberos/GSSAPI support.
: To get Active Directory users to successfully login,
: you need to configure your OpenSSH with the following options:
: (display the ones we identified were not set)
: ChallengeResponseAuthentication yes
: UsePAM Yes
:
: Centrify provides a version of OpenSSH that's configured properly
: to allow AD users to login and provides Kerberos GSSAPI support.
DOMNAME : Check that the domain name is reasonable : Warning
: The Active Directory domain name mtips.xxx.local may cause
: resolution problems with the operating system domain
: name server. We strongly suggest you do not use .local
: as the last component in your Active Directory domain name.
: If you must, please see the release notes for your operating
: system and ensure you have disabled multicast DNS.
ADDC : Find domain controllers in DNS : Pass
ADDNS : DNS lookup of DC mtipsxxxdc01.mtips.xxx.local : Pass
ADPORT : Port scan of DC mtipsxxxdc01.mtips.xxx.local 10.254.3.100: Pass
ADDNS : DNS lookup of DC mtipsxxxdc02.mtips.xxx.local : Pass
ADPORT : Port scan of DC mtipsxxxdc02.mtips.xxx.local 10.254.3.101: Pass
ADDC : Check Domain Controllers : Pass
ADDNS : DNS lookup of DC mtipsxxxdc01.mtips.xxx.local : Pass
GCPORT : Port scan of GC mtipsxxxdc01.mtips.xxx.local 10.254.3.100: Pass
ADDNS : DNS lookup of DC mtipsxxxdc02.mtips.xxx.local : Pass
GCPORT : Port scan of GC mtipsxxxdc02.mtips.xxx.local 10.254.3.101: Pass
ADGC : Check Global Catalog servers : Pass
DCUP : Check for operational DCs in mtips.xxx.local : Pass
SITEUP : Check DCs for mtips.xxx.local in our site : Pass
DNSSYM : Check DNS server symmetry : Warning
: Some DNS servers can not get srv list from domain.
: Some DNS servers not able to look up DC.
ADSITE : Check that this machine's subnet is in a site known by AD : Pass
GSITE : See if we think this is the correct site : Pass
TIME : Check clock synchronization : Pass
ADSYNC : Check domains all synchronized : Pass
3 warnings were encountered during check. We recommend checking these before proceeding