showres Command Display Resource Properties
Valid in the AC environment
capamsc141
Valid in the AC environment
The showres command displays the properties of resources belonging to classes in the database. The properties are listed in alphabetical order. The following classes can be listed using the showres command: ACVAR, ADMIN, CATEGORY, CONNECT, FILE, GHOST, GSUDO, GTERMINAL, HOST, HOSTNET, HOSTNP, SECFILE, SECLABEL, SUDO, SURROGATE, TERMINAL, PROGRAM, PROCESS, TCP, UACC, and any user defined class.
Privileged Access Manager
processes each resource independently and displays information only for those resources for which you have sufficient authority. This command also exists in the native Windows environment but operates differently there.
showres also displays information about any programs that have become untrusted. The information includes:
- The reason that the program became untrusted.
- The UID of the last user to access the program (not necessarily the user who caused the program to become untrusted).
- The date and time that this user accessed the program.
You can execute a showres command if at least one of the following conditions is true:
- You have at least one of the following attributes: ADMIN, AUDITOR, and OPERATOR.
- You are the owner of the resource.
- You are assigned read authority in the access control list of the object representing the resource class record in the ADMIN class.
This command has the following format:
{showres|sr} classNameresourceName \
[addprops(propName [,propName...])] \[next] \[props(all | propName [,propName...])] \[useprops(propName [,propName...])]
- addprops(propName[,propName...])Defines properties to be added to the current ruler for this query only.
- classNameSpecifies the name of the class to which the resource belongs. To list the resource classes defined toPrivileged Access Manager, use the find command.
- nextDisplays parts of the requested data. This option is useful when the query data is larger than the set query size.The maximum query size is determined by the query_size configuration setting. The query size default is set at 100.
- props(all|propName[,propName ...])Defines a new ruler for this class for this query and future queries.
- resourceNameSpecifies the name of the resource record whose properties are to be listed. When listing the properties of more than one resource, enclose the list of resource names in parentheses and separate the resource names with a space or a comma.Privileged Access Managerprocesses each resource record independently. If an error occurs while processing a resource,Privileged Access Managerissues a message and continues processing with the next resource in the list.resourceNamecan contain wildcard characters.On UNIX, to display the properties of a single resource record whose name contains a special character or space, type an extra slash (/) before the resource name.
- useprops(propName[,propName ...])Defines a ruler for this query only. The class ruler is unaffected.
Example: List record properties
In this example the user Admin1 wants to list the properties of the records whose names match the mask ath* in the TERMINAL class.
User Admin1 has the ADMIN and AUDITOR attributes.
showres TERMINAL ath*
Example: List host attributes
In this example the user Admin1 lists the attributes of the local host in the HNODE class.
PAMSC> showres HNODE '__local__'(localhost)Data for HNODE '__local__'-----------------------------------------------------------Owner : LOCALHOST\Administrator (USER)Create time : 13-Oct-2010 11:12Update time : 13-Oct-2010 11:13Updated by : LOCALHOST\Administrator (USER)Attributes :REGISTERED_NAME=localhost.domain.comMAC_ADDRESS=00-50-56-B5-6B-XD
In this example, the command returns the following attributes:
- REGISTERED_NAME=localhost.domain.com
- MAC_ADDRESS=00-50-56-B5-6B-XD