Compaq Advanced Server for OpenVMS

Document revision date: 30 March 2001

Compaq Advanced Server for OpenVMS
Commands Reference Manual

Contents

Index

SHOW CONNECTIONS

Displays information about active connections to the server. The display includes, in tabular form:

The connected user's name
The user's computer name
The name of the shared resource connected to
The number of open connections to each share
The total connect time to the share in days, hours, and minutes

Format

SHOW CONNECTIONS [computer-name] [/qualifiers]

restrictions

Use of this command requires membership in the Administrators or Server Operators local group.

Related Commands

SHOW OPEN_FILES
SHOW SESSIONS

Parameters

computer-name
Indicates that only connections from the specified computer should be displayed. If you omit the computer-name, then the display contains connection information for all computers that match any filtering criteria.

Qualifiers

/SERVER=server-name
Specifies the name of the server for which to show connections. The default is the server currently being administered.
/SHARENAME=share-name
Restricts the display of information to connections made to the specified shared resource. Do not specify both /SHARENAME and /TYPE on the same command line.
/TYPE=share-type
Controls the types of shared resource connections to be included in the display. Precede a share-type keyword with NO to exclude the specified connection type from the display. The value of the share-type keyword can be one or more of the following:

Share-Type Resource

ALL All types of connections (the default)

[NO]DIRECTORY Connections to directory shares

[NO]PRINT Connections to print queue shares

[NO]DEVICE Connections to communications devices

[NO]IPC Connections to interprocess communication

Do not specify both /SHARENAME and /TYPE on the same command line.
/USERNAME=user-name
Restricts the display of information to connections made by the specified user.

Share-Type	Resource
ALL	All types of connections (the default)
[NO]DIRECTORY	Connections to directory shares
[NO]PRINT	Connections to print queue shares
[NO]DEVICE	Connections to communications devices
[NO]IPC	Connections to interprocess communication

Examples

#1
LANDOFOZ\\TINMAN> SHOW CONNECTIONS Connections on server "TINMAN": User name Computer name Share name Opens Time ---------------- --------------- ------------ ----- -------- ADMINISTRATOR TINMAN_176 IPC$ 3 0 11:30 SCARECROW TINMAN_149 ADMIN$ 0 0 00:00 SCARECROW TINMAN_149 IPC$ 0 0 00:00 SCARECROW TINMAN_149 IPC$ 1 0 00:00 SCARECROW TINMAN_149 RAINBOW 0 0 06:14 Total of 5 connections

 LANDOFOZ\\TINMAN> SHOW CONNECTIONS 
 
 Connections on server "TINMAN": 
 
 User name         Computer name    Share name    Opens  Time 
 ----------------  ---------------  ------------  -----  -------- 
 ADMINISTRATOR     TINMAN_176       IPC$              3   0 11:30 
 SCARECROW         TINMAN_149       ADMIN$            0   0 00:00 
 SCARECROW         TINMAN_149       IPC$              0   0 00:00 
 SCARECROW         TINMAN_149       IPC$              1   0 00:00 
 SCARECROW         TINMAN_149       RAINBOW           0   0 06:14 
 
   Total of 5 connections

This example displays information about all the connections to the server currently being administered (TINMAN).

#2
LANDOFOZ\\TINMAN> SHOW CONNECTIONS/SHARENAME=RAINBOW Connections on server "TINMAN": User name Computer name Share name Opens Time ---------------- --------------- ------------ ----- -------- SCARECROW TINMAN_149 RAINBOW 0 0 06:14 Total of 1 connection

 LANDOFOZ\\TINMAN> SHOW CONNECTIONS/SHARENAME=RAINBOW 
 
 Connections on server "TINMAN": 
 
 User name         Computer name    Share name    Opens  Time 
 ----------------  ---------------  ------------  -----  -------- 
 SCARECROW         TINMAN_149       RAINBOW           0   0 06:14 
 
   Total of 1 connection

This example displays information about all the connections to the shared resource RAINBOW on the server being administered (TINMAN).

SHOW EVENTS

Displays information about events logged to a specified event log file on a server. The basic display includes, in tabular form:

The event type (Informational, Warning, Error, Success audit or Failure audit)
The date when the event occurred
The time when the event occurred
The source that logged the event
The event category
The event number used to identify the event
The user name associated with the event
The name of the computer where the event occurred

You can display additional information by using command qualifiers.

Format

SHOW EVENTS [log-file-spec] [/qualifiers]

restrictions

No special group membership is required to view the system or application event log file. Membership in the Administrators local group is required to view the security event log file.

Related Commands

CLEAR EVENTS
SAVE EVENTS
SET AUDIT POLICY
SHOW AUDIT POLICY

Parameters

log-file-spec
Specifies an optional local file specification of a saved log file from which to display events. On Compaq OpenVMS servers, if no device or directory is specified, the event log file is searched for in the path pointed to by the logical name PWRK$LMLOGS. You must specify the /TYPE qualifier to select the type of log file that was saved to the archived file.

Qualifiers

/BEFORE=date-time
Displays all events logged prior to a specified date and time. The default is the current date and time. The time value can be an absolute, delta, or combination time value, or one of the following keywords: TODAY, TOMORROW, or YESTERDAY.
/CATEGORY=category
Specifies the category of events to display. The category is defined by the source that logged the event. For example, the Security event categories are: Logon/Logoff, Policy Change, Privilege Use, System Event, Object Access, Detailed Tracking, and Account Management.
/CLASS=(class[,...])
Controls the class of events to display. Precede the class keyword with NO to exclude the specified event class from the display. The class keyword can be one or more of the following:

Class Event Type

ALL Selects all events. This is the default.

[NO]INFORMATION Selects informational events.

[NO]WARNING Selects warning events.

[NO]ERROR Selects error events.

[NO]SUCCESS_AUDIT Selects audit events that succeeded.

[NO]FAILURE_AUDIT Selects audit events that failed.

/COMPUTER=computer-name
Displays only events generated by the specified computer name.
/COUNT=n
Specifies the maximum number of events to display. By default, entries are displayed that match any filtering criteria.
/EVENTID=event-id
Displays entries for a specific event number (event-id) only.
/FULL

/NOFULL
Displays detailed information for each event. This information is generated by the application that was the source of the event record. Not all sources or events generate event details. /NOFULL, the default, omits event details.
/SERVER=server-name
Specifies the name of the server from which to display the events. The default is the server currently being administered.
/SINCE=date-time
Displays all events logged on or after the specified date and time. The time value can be an absolute, delta, or combination time value, or one of the following keywords: TODAY, TOMORROW, or YESTERDAY. When the /SINCE qualifier is omitted, all events logged since the event log was created are displayed. The /SINCE qualifier without a value is equivalent to /SINCE=TODAY.
/SORT=sort-order
Specifies the sorting order of the display, where sort-order is either of the following keywords:

Sort-Order Description

ASCENDING Ascending order by date and time

DESCENDING Descending order by date and time (the default)

/SOURCE=source-name
Displays only events generated by the specified source. The source-name specifies the software that logged the event, which can be either an application name or a component of the system or an application, such as a driver name.
/TYPE=log-type
Specifies the event log file or log type to be displayed. If the log-file-spec parameter is not specified, log-type indicates which log file you wish to display. If the log-file-spec parameter is specified, the /TYPE qualifier is required and log-type indicates what type of log was saved in the archived file. The log-type keyword can be one of the following:

Log-Type Log File

APPLICATION The application event log file

SECURITY The security event log file

SYSTEM The system event log file (the default)

/USERNAME=user-name
Displays only events associated with a specific user name.

Class	Event Type
ALL	Selects all events. This is the default.
[NO]INFORMATION	Selects informational events.
[NO]WARNING	Selects warning events.
[NO]ERROR	Selects error events.
[NO]SUCCESS_AUDIT	Selects audit events that succeeded.
[NO]FAILURE_AUDIT	Selects audit events that failed.

Sort-Order	Description
ASCENDING	Ascending order by date and time
DESCENDING	Descending order by date and time (the default)

Log-Type	Log File
APPLICATION	The application event log file
SECURITY	The security event log file
SYSTEM	The system event log file (the default)

Example


LANDOFOZ\\TINMAN> SHOW EVENTS/TYPE=SYSTEM/SINCE=16-OCT-2000:13:00 Events in System Event Log on server "TINMAN": T Date Time Source Category Event User Computer - -------- ----------- --------- ------------ ------ ------- -------- I 10/16/00 03:04:27 PM Eventlog None 6005 N/A TINMAN I 10/18/00 01:33:03 PM Eventlog None 6005 N/A TINMAN I 10/18/00 03:11:04 PM Eventlog None 6005 N/A TINMAN I 10/18/00 04:58:45 PM Eventlog None 6005 N/A TINMAN E 10/19/00 03:47:51 PM NETLOGON None 3210 N/A TINMAN E 10/19/00 03:49:03 PM NETLOGON None 3210 N/A TINMAN I 10/20/00 08:38:36 AM Eventlog None 6005 N/A TINMAN Total of 7 events

LANDOFOZ\\TINMAN> SHOW EVENTS/TYPE=SYSTEM/SINCE=16-OCT-2000:13:00 
 
Events in System Event Log on server "TINMAN": 
 
T Date     Time        Source    Category     Event  User    Computer 
- -------- ----------- --------- ------------ ------ ------- -------- 
I 10/16/00 03:04:27 PM Eventlog  None         6005   N/A     TINMAN 
I 10/18/00 01:33:03 PM Eventlog  None         6005   N/A     TINMAN 
I 10/18/00 03:11:04 PM Eventlog  None         6005   N/A     TINMAN 
I 10/18/00 04:58:45 PM Eventlog  None         6005   N/A     TINMAN 
E 10/19/00 03:47:51 PM NETLOGON  None         3210   N/A     TINMAN 
E 10/19/00 03:49:03 PM NETLOGON  None         3210   N/A     TINMAN 
I 10/20/00 08:38:36 AM Eventlog  None         6005   N/A     TINMAN 
 
  Total of 7 events

This example displays all events in the system event log file which have been logged since 16-OCT-2000 at 1:00 PM on the server being administered (TINMAN).

SHOW FILES

Displays information about directory and file auditing, ownership, and permissions.

Format

SHOW FILES path [/qualifiers]

restrictions

Use of this command does not require special group membership. However, you must have read permission to the files or directories you wish to show.

Related Commands

SET FILE
SHOW OPEN_FILES

Parameters

path
Specifies the UNC (Universal Naming Convention) path to the directory or file for which to show information.

Qualifiers

/AUDIT

/NOAUDIT
/AUDIT displays auditing information for the specified directory or files. Each file or directory is followed by a list of users and groups that have auditing events enabled, and which success and failure events are being audited. The default is /NOAUDIT, which omits the auditing information.
/FILES

/NOFILES
Specifies whether only files or directories are displayed. This qualifier is only valid if path specifies a directory. The default is /FILES, which displays the files in directories.
/FULL

/NOFULL
Displays all information about the specified directory or files. /FULL is equivalent to specifying /AUDIT/OWNERSHIP/PERMISSIONS. /NOFULL, the default, just displays the file names that match any filtering criteria.
/OWNERSHIP

/NOOWNERSHIP
Displays the owner of the specified directory or files. The default, /NOOWNERSHIP, omits the owner.
/PERMISSIONS

/NOPERMISSIONS
Displays access permission information for the specified directory or files. Each file or directory is followed by a list of users and groups that have been granted access permissions, along with the granted permissions. The default, /NOPERMISSIONS, omits the access permission information.
/SERVER=server-name
Specifies the name of the server on which the directory or files reside and for which to display the requested information. The default is the server currently being administered.
/SUBDIRECTORIES

/NOSUBDIRECTORIES
Specifies whether all subdirectories below the specified directory should be displayed. This qualifier is only valid if path specifies a directory. The default, /NOSUBDIRECTORIES, omits subdirectories below the specified directory.

Example


LANDOFOZ\\TINMAN> SHOW FILES STATES\KANSAS\*.DAT /FULL Files in: \\TINMAN\STATES\KANSAS FILE1.DAT Permissions: Administrators Full (All) Everyone Change (RWXD) Server Operators Change (RWXD) SYSTEM Full (All) Audit Events: (None specified) Owner: Scarecrow FILE2.DAT Permissions: Administrators Full (All) Everyone Change (RWXD) Server Operators Change (RWXD) SYSTEM Full (All) Audit Events: Success Failure Everyone RW---- RWXDPO Owner: Scarecrow Total of 2 files

LANDOFOZ\\TINMAN> SHOW FILES STATES\KANSAS\*.DAT /FULL 
 
Files in: \\TINMAN\STATES\KANSAS 
 
  FILE1.DAT 
    Permissions: 
      Administrators                     Full (All) 
      Everyone                           Change (RWXD) 
      Server Operators                   Change (RWXD) 
      SYSTEM                             Full (All) 
    Audit Events: (None specified) 
    Owner: Scarecrow 
 
  FILE2.DAT 
    Permissions: 
      Administrators                     Full (All) 
      Everyone                           Change (RWXD) 
      Server Operators                   Change (RWXD) 
      SYSTEM                             Full (All) 
    Audit Events:                        Success    Failure 
      Everyone                           RW----     RWXDPO 
    Owner: Scarecrow 
 
  Total of 2 files

This example displays auditing, permissions, and owner information about all .DAT files in the shared directory KANSAS in the share STATES that resides on the server currently being administered (TINMAN).

SHOW GROUPS

Displays information about groups that are defined in a domain. The basic display includes, in tabular form:

The group name
The group type (local or global)
The group's description

You can display additional information by using command qualifiers.

Format

SHOW GROUPS [group-name] [/qualifiers]

restrictions

Use of this command in its default form does not require special group membership; however, the use of certain qualifiers may require special group membership. See the specific qualifier for any group membership requirements.

Related Commands

ADD GROUP
COPY GROUP
MODIFY GROUP
REMOVE GROUP

Parameters

group-name
Indicates that information only for the specified group should be displayed. If you omit group-name, then the display contains information about all groups in the domain that match any filtering criteria. Do not specify the group-name parameter on the same command line as the /GLOBAL or /LOCAL qualifiers.

Qualifiers

/DOMAIN=domain-name
Specifies the name of the domain for which to display the group information. The default is the domain currently being administered. Do not specify both /DOMAIN and /SERVER on the same command line.
/FULL

/NOFULL
/FULL displays all information about the groups; equivalent to specifying /MEMBERS. The default is /NOFULL, which omits all information about groups. Use of this qualifier requires membership in the Administrators or Account Operators local group.
/GLOBAL
Specifies that only global groups should be included in the display. If you specify neither /GLOBAL nor /LOCAL, both global and local groups are displayed. Do not specify the group-name parameter on the same command line as the /GLOBAL qualifier.
/LOCAL
Specifies that only local groups should be included in the display. If you specify neither /GLOBAL nor /LOCAL, both global and local groups are displayed. Do not specify the group-name parameter on the same command line as the /LOCAL qualifier.
/MEMBERS

/NOMEMBERS
Controls whether the list of members for each group is included in the display. By default, the member list is not displayed. Use of this qualifier requires membership in the Administrators or Account Operators local group.
/SERVER=server-name
Specifies the name of a server that is a member of the domain for which to show the group information. Do not specify both /DOMAIN and /SERVER on the same command line.

Examples

#1
LANDOFOZ\\TINMAN> SHOW GROUPS ADMINISTRATORS/MEMBERS Groups in domain "LANDOFOZ": Group Name Type Description -------------------- ------ --------------------------------------- Administrators Local Members can fully administer the domain Members: [US] Administrator, [GR] Domain Admins Total of 1 group

 LANDOFOZ\\TINMAN> SHOW GROUPS ADMINISTRATORS/MEMBERS 
 
 Groups in domain "LANDOFOZ": 
 
 Group Name            Type    Description 
 --------------------  ------  --------------------------------------- 
 Administrators        Local   Members can fully administer the domain 
     Members: [US] Administrator, [GR] Domain Admins 
 
 Total of 1 group

This example displays information about the local group ADMINISTRATORS in the default domain (LANDOFOZ). It includes the list of members of the group. The member Administrator is a user account, as indicated by the [US] display symbol. The member Domain Admins, is a group, as indicated by the [GR] display symbol. See the Help topic "Display_Symbols" for further information about display symbols.

#2
LANDOFOZ\\TINMAN> SHOW GROUPS "Domain Admins"/MEMBERS Groups in domain "LANDOFOZ": Group Name Type Description -------------------- ------ --------------------------------------- Domain Admins Global Designated administrators of the domain Members: [US] Administrator Total of 1 group

 LANDOFOZ\\TINMAN> SHOW GROUPS "Domain Admins"/MEMBERS 
 
 Groups in domain "LANDOFOZ": 
 
 Group Name            Type    Description 
 --------------------  ------  --------------------------------------- 
 Domain Admins         Global  Designated administrators of the domain 
     Members: [US] Administrator 
 
 Total of 1 group

This example displays information about the global group Domain Admins in the default domain (LANDOFOZ). The group name must be enclosed within quotation marks because it contains a space. The display includes the list of members of the group. The member Administrator is a user account, as indicated by the [US] display symbol.

SHOW HOSTMAP

Displays account mappings between Advanced Server user accounts and OpenVMS user accounts on a server.

Format

SHOW HOSTMAP [[domain-name\]user-name] [/qualifiers]

restrictions

This command is valid only to Compaq OpenVMS servers. Use of this command requires membership in the Administrators local group.

Related Commands

ADD HOSTMAP
REMOVE HOSTMAP

Parameters

[domain-name\]user-name
Specifies either an Advanced Server or OpenVMS system user name for which to display account mappings. If you do not specify a user name, mappings for all user accounts are displayed.
You can display account mappings for a network user in a trusted domain. Specify the domain-qualified user name in the format domain-name\user-name, such as KANSAS\DOLE, where KANSAS is the trusted domain, and DOLE is the user name of the user account defined in the trusted domain. If you omit the domain name, the user account is assumed to be defined in the domain of the server currently being administered.

Qualifiers

/HOSTUSER
Displays mappings between OpenVMS user accounts and Advanced Server user accounts. If a user name was specified, /HOSTUSER indicates that the name is an OpenVMS user name. Do not specify both /HOSTUSER and /NETUSER on the same command line.
/NETUSER
Displays mappings between Advanced Server user accounts and OpenVMS user accounts. This is the default if neither /NETUSER or /HOSTUSER is specified. If a user name is specified, /NETUSER indicates that the name is an Advanced Server user name. Do not specify both /HOSTUSER and /NETUSER on the same command line.
/SERVER=server-name
Specifies the name of the server for which to show the account mappings. The default is the server currently being administered.

Examples

#1
LANDOFOZ\\TINMAN> SHOW HOSTMAP Host Mappings for server "TINMAN": User Name Host Name ------------------------------------ ---------------- Guest PWRK$GUEST SCARECROW STRAWMAN WITCH WICCER Total of 3 host mappings

 LANDOFOZ\\TINMAN> SHOW HOSTMAP 
 
 Host Mappings for server "TINMAN": 
 
 User Name                             Host Name 
 ------------------------------------  ---------------- 
 Guest                                 PWRK$GUEST 
 SCARECROW                             STRAWMAN 
 WITCH                                 WICCER 
 
   Total of 3 host mappings

This example displays the account mappings between OpenVMS user accounts and Advanced Server user accounts for the server currently being administered (TINMAN).

#2
LANDOFOZ\\TINMAN> SHOW HOSTMAP SCARECROW/NETUSER Host Mappings for server "TINMAN": User Name Host Name ------------------------------------ ---------------- SCARECROW STRAWMAN Total of 1 host mapping

This example displays the account mapping for the Advanced Server user SCARECROW on the server currently being administered (TINMAN).

SHOW MODE

Displays the current ADMINISTER command output display format and input mode.

Format

SHOW MODE

restrictions

None

Related Commands

SET MODE

Example


LANDOFOZ\\TINMAN> SHOW MODE Current mode settings: Input: RAW Output: RAW, FILTER

In this example, the current output and input modes are RAW. Output is filtered, meaning that character codes 127 - 160 (hex) are converted to spaces.

SHOW OPEN_FILES

Displays information about shared files, devices, and administration resources open on a server. The display includes, in tabular form:

The resource ID (a unique number used to identify the resource)
The name of the user that has the resource open
The access granted when the resource was opened
The number of locks on the resource
The path to the resource

Format

SHOW OPEN_FILES [resource-id] [/qualifiers]

restrictions

Use of this command requires membership in the Administrators or Server Operators local group.

Related Commands

CLOSE OPEN_FILE
SHOW CONNECTIONS
SET FILE
SHOW FILES

Parameters

resource-id
Displays information for only the resource with the specified resource-id. If you omit the resource-id, information for all open resources is displayed.

Qualifiers

/SERVER=server-name
Specifies the name of the server for which to show open resources. The default is the server currently being administered.
/USERNAME=user-name
Restricts the display of information to resources opened by the specified user.

Examples

#1
LANDOFOZ\\TINMAN> SHOW OPEN_FILES/USERNAME=SCARECROW Open files on server "TINMAN": Res ID User Name For Locks Path --------- -------------------- ------- ----- ---------------------- 2 SCARECROW Write 0 TINMAN$DK0:[S.A]A.C 6 SCARECROW Write 0 TINMAN$DK0:[S.A]B.C Total of 2 open files

 LANDOFOZ\\TINMAN> SHOW OPEN_FILES/USERNAME=SCARECROW 
 
 Open files on server "TINMAN": 
 
 Res ID     User Name             For      Locks  Path 
 ---------  --------------------  -------  -----  ---------------------- 
         2  SCARECROW             Write        0  TINMAN$DK0:[S.A]A.C 
         6  SCARECROW             Write        0  TINMAN$DK0:[S.A]B.C 
 
   Total of 2 open files

This example shows the resources currently opened by user SCARECROW on the server currently being administered (TINMAN).

#2
LANDOFOZ\\TINMAN> SHOW OPEN_FILES Open files on server "TINMAN": Res ID User Name For Locks Path --------- -------------------- ------- ----- ---------------------- 2 SCARECROW Write 0 TINMAN$DK0:[S.A]A.C 6 SCARECROW Write 0 TINMAN$DK0:[S.A]B.C 9998 ADMINISTRATOR Write 0 \PIPE\LSARPC 10000 ADMINISTRATOR Write 0 \PIPE\SAMR 9999 ADMINISTRATOR Write 0 \PIPE\SAMR Total of 5 open files

 LANDOFOZ\\TINMAN> SHOW OPEN_FILES 
 
 Open files on server "TINMAN": 
 
 Res ID     User Name             For      Locks  Path 
 ---------  --------------------  -------  -----  ---------------------- 
         2  SCARECROW             Write        0  TINMAN$DK0:[S.A]A.C 
         6  SCARECROW             Write        0  TINMAN$DK0:[S.A]B.C 
      9998  ADMINISTRATOR         Write        0  \PIPE\LSARPC 
     10000  ADMINISTRATOR         Write        0  \PIPE\SAMR 
      9999  ADMINISTRATOR         Write        0  \PIPE\SAMR 
 
   Total of 5 open files

This example shows all the resources currently opened on server TINMAN, including the system or administrative resources (in this case, the named pipes that are open).

Contents

Index

privacy and legal statement

6544PRO_10.HTML

Compaq Advanced Server for OpenVMSCommands Reference Manual

SHOW CONNECTIONS

Format

restrictions

Related Commands

Parameters

computer-name

Qualifiers

/SERVER=server-name

/SHARENAME=share-name

/TYPE=share-type

/USERNAME=user-name

Examples

SHOW EVENTS

Format

restrictions

Related Commands

Parameters

log-file-spec

Qualifiers

/BEFORE=date-time

/CATEGORY=category

/CLASS=(class[,...])

/COMPUTER=computer-name

/COUNT=n

/EVENTID=event-id

/FULL

/NOFULL

/SERVER=server-name

/SINCE=date-time

/SORT=sort-order

/SOURCE=source-name

/TYPE=log-type

/USERNAME=user-name

Example

SHOW FILES

Format

restrictions

Related Commands

Parameters

path

Qualifiers

/AUDIT

/NOAUDIT

/FILES

/NOFILES

/FULL

/NOFULL

/OWNERSHIP

/NOOWNERSHIP

/PERMISSIONS

/NOPERMISSIONS

/SERVER=server-name

/SUBDIRECTORIES

/NOSUBDIRECTORIES

Example

SHOW GROUPS

Format

restrictions

Related Commands

Parameters

group-name

Qualifiers

/DOMAIN=domain-name

/FULL

/NOFULL

/GLOBAL

/LOCAL

/MEMBERS

/NOMEMBERS

/SERVER=server-name

Examples

SHOW HOSTMAP

Format

restrictions

Related Commands

Parameters

[domain-name\]user-name

Qualifiers

/HOSTUSER

Compaq Advanced Server for OpenVMS
Commands Reference Manual