Your Browser is not longer supported

Please use Google Chrome, Mozilla Firefox or Microsoft Edge to view the page correctly
Loading...

{{viewport.spaceProperty.prod}}

SHOW-KEYTAB-ENTRY Output key table entry

Domain:

SECURITY-ADMINISTRATION

Privileges:

SECURITY-ADMINISTRATION

The security administrator (by default the user ID SYSPRIV) can use this command to output entries in the key table.

SHOW-KEYTAB-ENTRY

ENTRY-IDENTIFICATION = *STD / *ALL / list-poss(20): *STD /




*SYSTEM-DEFAULT / <name 1..8 with-wild(32)>


,PUBSET = *ALL / list-poss(2000): *HOME / <cat-id 1..4>

,SELECT = *ALL / *BY-ATTRIBUTES(...)


*BY-ATTRIBUTES(...)



|

PRINCIPAL = *ANY / <c-string 1..1800 with-low>

,INFORMATION = *ALL / *ATTRIBUTES

,OUTPUT = list-poss(2): *SYSOUT / *SYSLST

ENTRY-IDENTIFICATION = *STD / *ALL / list-poss(20): *STD / *SYSTEM-DEFAULT /
<name 1..8 with_wild(32)>
Identification of the entry to be output.

ENTRY-IDENTIFICATION = *ALL
All entries are output.

PUBSET = *ALL / list-poss(2000): *HOME / <cat-id 1..4>
Catalog ID of the pubset from whose user catalogs the keys are output. During operation the keys of the home pubset are definitive.

SELECT =
Specification of criteria according to which the entries to be output are selected.

SELECT = *ALL
Entries are output regardless of additional criteria.

SELECT = *BY-ATTRIBUTES(...)
Entries are output only if they satisfy the specified criterion.

PRINCIPAL = *ANY / <c-string 1..1800 with-low>
Kerberos name of the BS2000 system whose entry is to be output. Wildcards which are contained in the name are taken into account if they are not invalidated by a preceding ’\’.

INFORMATION =
Specifies the output scope.

INFORMATION = *ALL
The attributes are output together with the Kerberos keys.

INFORMATION = *ATTRIBUTES
Only the attributes are output, without the Kerberos keys.

OUTPUT =
Defines the output medium for the information.

OUTPUT = *SYSOUT
The system file SYSOUT (in dialog the terminal) is output.

OUTPUT = *SYSLST
Output is to the system file SYSLST.

Output in S variables

The command’s INFORMATION operand is used to define the S variables for which values are entered. The following specifications are possible for INFORMATION:

Notation in command

Conditions in table

INFORMATION = *ALL

1

INFORMATION = *ATTRIBUTES

2

Output information

Name of the S variable

T

Contents

Condition

Unit for the validity period of
obsolete keys

var(*LIST).DIM

S

*DAYS
*HOURS
*MINUTES

1, 2

Entry ID

var(*LIST).ENTRY-ID

S

<name 1..8>

1, 2

Creation date of the key

var(*LIST).KEY(*LIST).DATE

S

<date 10>

1

Key

var(*LIST).KEY(*LIST).NAME

S

<name 1..32>

1

System default

var(*LIST).KEY(*LIST).SYS-DEF

S

*NO
*YES

1, 2

Creation time of the key

var(*LIST).KEY(*LIST).TIME

S

<time 8>

1

Key version

var(*LIST).KEY(*LIST).VERSION

I

<integer 0..
2147483647>

1

Validity period of obsolete keys

var(*LIST).KEY-OVERLAP

I

<integer 0..32767>

1, 2

Validity of obsolete keys

var(*LIST).KEY-OVERLAP-DEFI

S

*NO
*UNLIMITED
*LIMITED

1, 2

Principal

var(*LIST).PRINCIPAL

S

<name 1..1800>

1, 2

Pubset

var(*LIST).PUBSET

S

<catid 1..4>

1, 2


Example: Outputting a key table entry in S variables

/exec-cmd (show-keytab-entry),s-out=ops

/show-var ops,inf=*par(value=*c-literal)

OPS(*LIST).ENTRY-ID = '*STD'

OPS(*LIST).PUBSET = 'A'

OPS(*LIST).PRINCIPAL = 'host/bs2osd.domain.de@REALM.DOMAIN.DE'

OPS(*LIST).KEY-OVERLAP-DEFI= '*LIMITED'

OPS(*LIST).KEY-OVERLAP = 6

OPS(*LIST).DIM = '*MINUTES'

OPS(*LIST).KEY(*LIST).NAME = 'DES-CBC-CRC'

OPS(*LIST).KEY(*LIST).VERSION = 0

OPS(*LIST).KEY(*LIST).DATE = '2021-01-30'

OPS(*LIST).KEY(*LIST).TIME = '08:54:09'

*END-OF-VAR

OPS(*LIST).KEY(*LIST).NAME = 'DES-CBC-MD5'

OPS(*LIST).KEY(*LIST).VERSION = 0

OPS(*LIST).KEY(*LIST).DATE = '2021-01-30'

OPS(*LIST).KEY(*LIST).TIME = '08:54:09'

*END-OF-VAR

OPS(*LIST).KEY(*LIST).NAME = 'AES128-CTS'

OPS(*LIST).KEY(*LIST).VERSION = 0

OPS(*LIST).KEY(*LIST).DATE = '2021-01-30'

OPS(*LIST).KEY(*LIST).TIME = '08:54:09'

*END-OF-VAR

OPS(*LIST).KEY(*LIST).NAME = 'AES256-CTS'

OPS(*LIST).KEY(*LIST).VERSION = 0

OPS(*LIST).KEY(*LIST).DATE = '2021-01-30'

OPS(*LIST).KEY(*LIST).TIME = '08:54:09'

*END-OF-VAR

OPS(*LIST).KEY(*LIST).NAME = 'RC4-HMAC'

OPS(*LIST).KEY(*LIST).VERSION = 0

OPS(*LIST).KEY(*LIST).DATE = '2021-01-30'

OPS(*LIST).KEY(*LIST).TIME = '08:54:09'

*END-OF-VAR

OPS(*LIST).KEY(*LIST).NAME = 'RC4-HMAC-EXP'

OPS(*LIST).KEY(*LIST).VERSION = 0

OPS(*LIST).KEY(*LIST).DATE = '2021-01-30'

OPS(*LIST).KEY(*LIST).TIME = '08:54:09'

*END-OF-VAR

*END-OF-VAR