pts_getcps - Displays the Current Protection Set for one or more entries


pts getcps -nameorid <user or group name or id>+ [-cell <cell name>] [-noauth] [-localauth] [-force] [-auth] [-help] [-encrypt [<yes|no>]] [-config <configuration file>]


The pts getcps command displays the current protection set (CPS) for user, machine, network or group entries specified by the -nameorid argument.


-nameorid <user or group name or id>+

Specifies the name or AFS UID of each user, the name or AFS GID of each group, or the IP address (complete or wildcard-style) or AFS UID of each machine. It is acceptable to mix users, machines, and groups on the same command line, as well as names (IP addresses for machines) and IDs. Precede the GID of each group with a hyphen to indicate that it is negative.


Use the calling user's tokens to communicate with the Protection Server. For more details, see pts(1).

-cell <cell name>

Names the cell in which to run the command. For more details, see pts(1).

-config <configuration file>

Sets the location of the configuration file to be used. The default file is /etc/yfs/yfs-client.conf. For more details, see pts(1).

-encrypt [<yes|no>]

Enables or disables encryption for any communication with the Protection Server. For more details, see pts(1).


Enables the command to continue executing as far as possible when errors or other problems occur, rather than halting execution at the first error.


Prints the online help for this command. All other valid options are ignored.


Constructs a server ticket using a key from the local /etc/yfs/server/KeyFileExt file. Do not combine this flag with the -cell or -noauth options. For more details, see pts(1).


Assigns the unprivileged identity anonymous to the issuer. For more details, see pts(1).


The output for each entry consists of one line that include the following fields:


The contents of this field depend on the type of entry:


A unique number that is used to identify users, machines, networks, and groups. Auristor user, machine and network numbers (AUNs) are positive integers. Auristor Group Numbers (AGNs) are negative integers. The AUNs and AGNs managed by the Protection Service function similarly to the AUNs and AGNs used in local file systems, but apply only to /afs access control list (ACL) processing and other cell operations.

This is followed by one line for each of the CPS entries. Each entry consists of a Name and id as described above.


The following example displays the CPS for terry.

   % pts getcps terry
   Name: terry, id: 1045, cps:
     system:authuser (-102)
     system:anyuser (-101)
     terry (1045)

The following example displays the entries for the Auristor groups with AGNs -102..

   % pts getcps -102
   Name: system:authuser, id: -102, cps list:
     system:authuser (-102)
     system:anyuser (-101)


Members of the system:ptsviewers and system:administrators groups can always use this command in any of its variations. Additionally, an authenticated user or machine can always list the groups to which they belong, and the owner of a group can always list the members of the group.

Additional privileges may be granted by the setting of the (M) privacy flag in the Protection Service entry of each user, machine or group indicated by the -nameorid argument (use the pts_examine(1) command to display the flags):


pts(1), pts_creategroup(1), pts_createuser(1), pts_examine(1), pts_membership(1)


"AFS" is a registered mark of International Business Machines Corporation, used under license. (USPTO Registration 1598389)

"OpenAFS" is a registered mark of International Business Machines Corporation. (USPTO Registration 4577045)

The "AuriStor" name, log 'S' brand mark, and icon are registered marks of AuriStor, Inc. (USPTO Registrations 4849419, 4849421, and 4928460) (EUIPO Registration 015539653).

"Your File System" is a registered mark of AuriStor, Inc. (USPTO Registrations 4801402 and 4849418).

"YFS" and "AuriStor File System" are trademarks of AuriStor, Inc.