After you configure an authentication profile on a Palo
Alto Networks firewall or Panorama, you can use the test authentication
feature to determine if it can communicate with the back-end authentication
server and if the authentication request succeeded. You can additionally
test authentication profiles used for GlobalProtect and Captive
Portal authentication. You can perform authentication tests on the candidate
configuration, so that you know the configuration is correct before committing.
Authentication server connectivity testing is supported for local
database, RADIUS, TACACS+, LDAP, and Kerberos authentication.
The following topics describe how to use the test authentication
command and provides examples: