nssctl -d report

Display information about NSS clients that are managed by the NSS server.

nssctl -d report command syntax

For -d primary option syntax see The z/OS UNIX nssctl command syntax.

nssctl -d report command syntax examples

nssctl -d: Display the status of all clients that are connected to the local NSS server.
nssctl -d -c nsclient1: Display the status of the nsclient1 client that is connected to the local NSS server.

nssctl -d report example

nssctl -d:

CS V2R1 nssctl  SystemName: MVS093    Sat Dec 10 08:47:39 2011
Function: Display            NSSClientName: n/a

ClientName:                      clientIB1
ClientAPIVersion:                2
StackName:                       tcpcs1
SystemName:                      zsystem2
ClientIPAddress:                 9.42.105.88
ClientPort:                      8801
ServerIPAddress:                 9.42.105.234
ServerPort:                      4159
UserID:                          userxyz
ConnectState:                    connected
TimeConnected:                   2011/12/10 08:47:05
TimeOfLastMessageFromClient:     2011/12/10 08:47:05
Discipline:                      IPSec
  CertificateServiceSelected:    Yes
  CertificateServiceEnabled:     Yes
  RemoteManagementSelected:      Yes
  RemoteManagementEnabled:       Yes
***************************************************************
ClientName:                      ClientXB1
ClientAPIVersion:                3
StackName:                       Any
SystemName:                      dpsys01
ClientIPAddress:                 ::ffff:10.11.1.5
ClientPort:                      1024
ServerIPAddress:                 ::ffff:10.81.1.1
ServerPort:                      4159
UserID:                          USER5
ConnectState:                    connected
TimeConnected:                   2011/12/10 08:47:13
TimeOfLastMessageFromClient:     2011/12/10 08:47:13
Discipline:                      XMLAppliance
  CertificateServiceSelected:    Yes                            
  CertificateServiceEnabled:     Yes                            
  PrivateKeyServiceSelected:     Yes                            
  PrivateKeyServiceEnabled:      Yes                            
  SAFAccessServiceSelected:      Yes
  SAFAccessServiceEnabled:       Yes
***************************************************************

2 entries selected

nssctl -d report field descriptions

For the header information, see The nssctl command report heading.

ClientName

The name of the NSS client. If the client is not authenticated to the server, a temporary client name is displayed.

ClientAPIVersion

The version of the NSS client API that the NSS client is using. Possible values are.

1: The level of NSS support that is available in z/OS® V1R9 and later.
2: The level of NSS support that is available in z/OS V1R10 and later.
3: The level of NSS support that is available in z/OS V1R11 and later.

StackName

The name of the stack as defined on the client system. If the NSS client is not running on a z/OS system, then this value is not applicable.

SystemName

The name of the system on which the client is running.

ClientIPAddress

The IP address by which the NSS server knows the NSS client.

ClientPort

The port by which the NSS server knows the NSS client.

ServerIPAddress

The IP address of the NSS server.

ServerPort

The port number of the NSS server.

UserID

The user ID of the NSS client that is used to connect to the NSS server.

ConnectionState

The state of the connection from the NSS client. Possible state values are:

connected: Indicates that the client can use enabled NSS services.
connect pending: Indicates that the client has requested a connection to the NSS server but it is not yet connected.
update pending: Indicates that the client has dynamically reconfigured its authentication information or its requested NSS services. The client has requested a connection update but has not received a successful response from the NSS server.
disconnect pending: Indicates that the client has requested to disconnect the connection, but the connection is not yet disconnected.

TimeConnected

The time at which the NSS client connected to the NSS server.

TimeOfLastMessageFromClient

The time that the NSS server last received a message from the client.

Discipline

The discipline from which the client is requesting NSS services. Possible discipline values are:

IPSec

The IPSec client is requesting NSS services. The following IPSec discipline-specific information is displayed:

CertificateServiceSelected: Indicates whether the IPSec client is configured for the IPSec certificate service. The value Yes indicates that the IPSec client is configured for the NSS IPSec certificate service. The value No indicates that the IPSec client is not configured for the NSS IPSec certificate service.
CertificateServiceEnabled: Indicates whether the IPSec client is enabled for the IPSec certificate service at the NSS server. The value Yes indicates that the IPSec client is requested and permitted to access the NSS IPSec certificate service. The value No indicates that the IPSec client is not permitted to access the NSS IPSec certificate service.
RemoteManagementSelected: Indicates whether the IPSec client is configured for remote management. The value Yes indicates that the IPSec client is configured for the NSS remote management service. The value No indicates that the IPSec client is not configured for the NSS remote management service.
RemoteManagementEnabled: Indicates whether the IPSec client is enabled for remote management at the NSS server. The value Yes indicates that the IPSec client is permitted to access the NSS remote management service. The value No indicates that the IPSec client is not permitted to access the NSS remote management service.

XMLAppliance

The XMLAppliance client is requesting NSS services. The following XMLAppliance discipline-specific information is displayed:

CertificateServiceSelected: Indicates whether the XMLAppliance client requested the XMLAppliance certificate service. The value Yes indicates that the XMLAppliance client requested the NSS XMLAppliance certificate service. The value No indicates that the XMLAppliance client did not request the NSS XMLAppliance certificate service.
CertificateServiceEnabled: Indicates whether the certificate service is enabled for the XMLAppliance client. The value Yes indicates that the certificate service is requested and permitted for the XMLAppliance client. The value No indicates that the certificate service is not permitted for the XMLAppliance client.
PrivateKeyServiceSelected: Indicates whether the XMLAppliance client requested the private key service. The value Yes indicates that the XMLAppliance client requested the NSS private key service. The value No indicates that the XMLAppliance client did not request the NSS private key service.
PrivateKeyServiceEnabled: Indicates whether the private key service is enabled for the XMLAppliance client. The value Yes indicates that the private key service is requested and permitted for the XMLAppliance client. The value No indicates that the private key service is not permitted for the XMLAppliance client.
SAFAccessServiceSelected: Indicates whether the XMLAppliance client requested the SAF access service. The value Yes indicates that the XMLAppliance client requested the NSS SAF access service. The value No indicates that the XMLAppliance client did not request the NSS SAF access service.
SAFAccessServiceEnabled: Indicates whether the SAF access service is enabled for the XMLAppliance client. The value Yes indicates that the SAF access service is requested and permitted for the XMLAppliance client. The value No indicates that the SAF access service is not permitted for the XMLAppliance client.