Identifying certificate name filtering use in ACF2

Products

• ACF2
• ACF2 - z/OS
• ACF2 - MISC

Issue/Introduction

What commands in ACF2 will show if certificate name filtering is active?

These commands were issued:

SET CONTROL(GSO)
SHOW CERTMAP

and the outcome was:

 -- CERTMAP FILTERING TABLES --  
 CONTROL                         

What does "CONTROL" mean in the above?  
Is certificate name filtering in use?

 

Resolution

This indicates no CERTMAP records are defined and ACF2 is in control mode after issuing SET CONTROL(GSO).

If SET LID had been issued the output would have shown:

SET LID
SHOW CERTMAP
 -- CERTMAP FILTERING TABLES --
LID

There is no need to be in control(GSO) mode to issue any SHOW commands

In the above example certificate name filtering is not active.

If certificate name filtering IS active the following example might be seen:

-- CERTMAP FILTERING TABLES --

IDN/SDN FILTERS
---------------                     
                                          IDN FILTER    

                                                SDN FILTER
Label                            TRUST   USER   CRITERIA
================================ ===== ======== ==============================
label name                        Y     xxxxxx  CN=cn name.OU=ou
                                                name.O=oname
                                                .L=location.ST=state.C=xx
                                               

                                                                               
                                                                               
                                                                      

Additional Information