Purpose
Use
the RACDCERT LISTMAP command to display information about the specified
mapping, or all mappings, for a user ID.
See UTF-8 and BMP character restrictions for information about
how UTF-8 and BMP characters in certificate names are displayed using
RACDCERT functions.
Issuing options
The following table identifies
the eligible options for issuing the RACDCERT LISTMAP command:
As a RACF® TSO command? |
As a RACF operator command? |
With command direction? |
With automatic command direction? |
From the RACF parameter library? |
---|
Yes |
No |
No. (See rules.) |
No. (See rules.) |
No |
Rules: The
following rules apply when issuing this command. - The RACDCERT command cannot be directed to a remote system using
the AT or ONLYAT keyword.
- The updates made to the RACF database
by RACDCERT are eligible for propagation with automatic direction
of application updates based on the RRSFDATA profiles AUTODIRECT.target-node.DIGTMAP.APPL
and AUTODIRECT.target-node.DIGTCRIT.APPL,
where target-node is the remote node to
which the update is to be propagated.
|
Authorization required
To
issue the RACDCERT LISTMAP command, you must have the SPECIAL attribute
or sufficient authority to the IRR.DIGTCERT.LISTMAP resource in the
FACILITY class for your intended purpose.
Table 1. Authority required for the RACDCERT LISTMAP functionIRR.DIGTCERT.LISTMAP |
---|
Access level |
Purpose |
---|
READ |
List mapping information associated with your
own user ID. |
UPDATE |
List mapping information associated with another
user ID or MULTIID. |
Related commands
- To define a user ID mapping, see RACDCERT MAP.
- To alter a user ID mapping, see RACDCERT ALTMAP.
- To delete a user ID mapping, see RACDCERT DELMAP.
The RACDCERT LISTMAP command is unrelated to the RACMAP
LISTMAP command.
Syntax
For the key to
the symbols used in the command syntax diagrams, see Syntax of RACF commands and operands. The complete syntax of the RACDCERT
LISTMAP command is:
|
---|
RACDCERT LISTMAP[(LABEL('label-name'))] |
[ ID(mapping-owner) | MULTIID ]
|
If you specify more than one RACDCERT function, only
the last specified function is processed. Extraneous keywords that
are not related to the function being performed are ignored.
If you do not specify a RACDCERT function, LIST is
the default function.
For information on issuing this command as a RACF TSO command, refer to RACF TSO commands.
Parameters
- LISTMAP
- LISTMAP(LABEL('label-name'))
- Tip: Omit
LABEL to list all mappings associated with the specified user ID.
If
the mapping cannot be listed because the DIGTNMAP profile containing
it is missing or incomplete, the following error text appears in the
LISTMAP output:
Filter with label label-name not found.
Guideline: When
this error text appears in the LISTMAP output, issue a RACDCERT DELMAP
command specifying this label name to remove residual filter information
from the user's profile.
A missing or incomplete DIGTNMAP profile
might result if a previous RACDCERT command failed to complete due
to a system failure or early termination by the issuer. If the mapping
or DIGTNMAP profile were not created before the failure, the resulting
user profile might contain residual filter information indicating
that the user ID is associated with a mapping.
- ID(mapping-owner)
| MULTIID
- Specifies the user ID associated with the mapping. If you do not
specify ID or MULTIID, the default is ID, and mapping-owner defaults
to the user ID of the command issuer. If more than one keyword is
specified, the last specified keyword is processed and the others
are ignored by TSO command parse processing.
- ID(mapping-owner)
- Specifies the user ID associated with the mapping.
- MULTIID
- Specifies that additional criteria is used to determine the user
ID associated with the mapping.
Examples
|
|
|
---|
Example 1 |
Operation |
User RACFADM with SPECIAL authority to the profile
IRR.DIGTCERT.LISTMAP would like to list the mapping information for
user ID NET1ID. |
Known |
NET1ID has one mapping associated with it. |
Command |
RACDCERT ID(NET1ID) LISTMAP
|
Output |
See Figure 1. |
|
Example 2 |
Operation |
User RACFADM with SPECIAL authority to the profile
IRR.DIGTCERT.LISTMAP would like to list the mapping information for
MULTIID. |
Known |
MULTIID has several mappings associated with
it, but only the one with this label name will be listed. |
Command |
RACDCERT MULTIID LISTMAP(LABEL('NewAPPL ID Mapping'))
|
Output |
See Figure 2. |
Figure 1. Output
for the LISTMAP command Mapping information for user NET1ID:
Label: General Internet ID Map
Status: TRUST
Issuer's Name Filter:
>OU=Internet Demo CertAuth.O=BobsMart Software Inc.L=Internet<
Subject's Name Filter:
>L=Internet<
Figure 2. Output
for the LISTMAP LABEL command Mapping information for MULTIID:
Label: NewAPPL ID Mapping
Status: TRUST
Issuer's Name Filter:
>OU=Class 1 Public Primary Certification Authority.O=VeriSign, Inc..C=<
>US<
Subject's Name Filter:
><
Criteria:
APPLID=&APPLID