You can use xm to test if a domain can access its resources:
xm dry-run [configfile]
This checks each resource listed in your configfile. It lists the status of each resource and the final security decision.
