LIST Function—Display ACID Security Data

Command Functions › LIST Function—Display ACID Security Data

LIST Function—Display ACID Security Data

Valid on z/OS, z/VSE, and z/VM.

Use the LIST command function to display data from the:

Security record of a specific ACID
Security record of all ACIDs that match a specific prefix
Security record of all ACIDs of a specific type
Security record of all ACIDs in a department, and/or division
AUDIT, STC, NDT, RDT, FDT, DLF, SDT, APPCLU and/or ALL records

Once the ACIDs have been specified in the command, use the DATA operand to limit the output. Use the DATA(TERSE) operand to limit the security file I/O.

TSS LIST entries vary depending on the type of data being requested and from which Security Record the data is obtained.

Administrators must have explicit authority via the ADMIN ‑ DATA command function to LIST TSS data types.

CA Top Secret only displays data concerning ACIDs within the administrator's scope. An MSCA or an authorized SCA can LIST data for the entire site. A VCA may list data for his division and all subordinate departments, and a DCA may list data for his department.

When a DCA, VCA, or ZCA lists a user within their scope, the DEPARTMENT, DIVISION, and ZONE are included in the display.

ACIDs are listed first by division, then by the department within the division. User and profile ACIDs are listed in alphabetical order within an organizational grouping.

This command function has the following format:

TSS LIST (acid) keyword(setting)

This command function uses the keywords:

ACIDPRFX
DATA
DEPARTMENT
DIGICERT
DISPLAY
DIVISION
FDTNAME
FDTCODE
ISSUERDN
KEYRING
LABLCERT
LABLRING
LINKID
PREFIX
PSTKAPPL
RESCLASS
RESCODE
SEGMENT
SERIALNUM
SESSKEY
TARGET
TYPE
ZONE

Hard Copy Listings

Hard copy listings are obtained by using Batch TMP of TSSCFILE in z/OS and the batch utility TSSCRIPT for z/VM.

ACID Types

Use the following list to translate the ACID types that appear on the output of a TSS LIST command:

Code	ACID type
DC	DCA
D	Department
V	Division
LC	LSCA
P	Profile
SC	SCA
ZC	ZCA
VC	VCA
Z	Zone

Profile Sorting

When a TSS LIST(acid) DATA(PROFILES) command is issued, the profiles associated with that ACID is listed alphabetically.

To view the profiles in the order in which they are processed, enter:

TSS LIST(acid) DATA(PROFILES,NOSORT)

ACID Lists

When a TSS LIST(acid) DATA(BASIC) command is issued, the output associated with that ACID is sorted alphabetically (for example, LOCK TIME comes before TIME ZONE).

To list the segments and the fields within the segments alphabetically, enter:

TSS LIST(acid) SEGMENT(ALL)

Groupings are identified by the segment which they are in, not a header line. For example, groupings that were separated by a header line such as TSO DATA are now identified as SEGMENT TSO.

LIST in a Shared Environment

In a shared security file environment, all modifications to any SDT record type and data field made in the local system are immediately available to the TSS LIST command if entered from the same local system.

If the SDT modifications are made on a local system and the TSS LIST is attempted from a remote system, it is possible that some SDT records will not reflect the current changes as they are listed from internal tables not updated with the current data. The SDT record types and data fields that may experience this effect include:

CERTMAP Certificate name filter
CRITERIA Certificate filter criteria
CRITMAP Certificate filter ACID to user
DIGICERT Digital certificates
KERBLINK Kerberos foreign principals
KERBSEGM Kerberos principal user
KEYRING Certificate keyring
LINUXNAM Linux user name
REALM Kerberos local / foreign realms

For immediate access to the current TSS LIST record data for any of the included SDT record types on a remote system, enter the TSS MODIFY SYNCH command to refresh the required tables with current data from the security file.

Examples: LIST function

This example obtains all the data about a specific ACID and contents of all profiles connected to that ACID:

TSS LIST(acid) DATA(PROFILE,ALL)

This example obtains all the data about the ACIDs starting with a specific prefix and the contents of all profiles connected to those ACIDs:

TSS LIST(ACIDS) ACIDPRFX(acid‑prefix)
                DATA(PROFILE,ALL)

Note: Prefixes can be from one to seven characters long.

This example obtains data about all ACIDs of a specific type:

TSS LIST(ACIDS) TYPE(USER | PROFILE | GROUP | DCA | VCA | DEPARTMENT |
                     DIVISION | SCA | LSCA | ZONE | ZCA)
                DATA(BASIC,RESOURCE,XAUTH,LCF,SOURCE,INSTDATA,CICS,ADMIN,NAMES,
                     TSO,ACIDS,EXPIRE,PASSWORD|ALL[,PROFILE,PASSWORD,EXPIRE])

This example obtains data about all ACIDs in a department:

TSS LIST(ACIDS) DEPARTMENT(department acid)
                DATA(BASIC,RESOURCE,XAUTH,LCF,SOURCE,TSO,
                INSTDATA,CICS,ADMIN,NAMES,ACIDS,
                PASSWORD|ALL [,EXPIRE,PASSWORD,PROFILE])

This example obtains data about all ACIDs in a division:

TSS LIST(ACIDS) DIVISION(div. acid)
                DATA(BASIC,RESOURCE,XAUTH,LCF,SOURCE,TSO,
                INSTDATA,CICS,ADMIN,NAMES,ACIDS,
                PASSWORD|ALL [,EXPIRE,PASSWORD,PROFILE])

This example obtains data about all ACIDs in a zone:

TSS LIST(ACIDS) ZONE(zon. acid)
                DATA(BASIC,RESOURCE,XAUTH,LCF,SOURCE,TSO,
                INSTDATA,CICS,ADMIN,NAMES,ACIDS,
                PASSWORD|ALL [,EXPIRE,PASSWORD,PROFILE])

This example obtains data about the contents of the ALL record:

TSS LIST(ALL)

This example obtains data about the contents of the DLF record:

TSS LIST(DLF)

This example obtains data about the contents of the AUDIT record:

TSS LIST(AUDIT)

This example obtain data about the contents of the STC record:

TSS LIST(STC)

This example obtains data about the contents of the RDT record:

TSS LIST(RDT)

This example obtains data about the contents of the FDT record:

TSS LIST(FDT)

This example obtain data about the contents of the NDT record:

TSS LIST(NDT)

This example obtains data about the contents of the SDT record:

TSS LIST(SDT)

This example obtains data about the contents of the APPCLU record:

TSS LIST(APPCLU)

This example obtains data about the contents of the MLS record:

TSS LIST(MLS)

This example produces a list of the profile ACIDs associated with USER01 in the order in which they are searched by the Security Algorithm:

TSS LIST(USER01) DATA(PROFILES,NOSORT)