OSF DCE Administration Guide--Core Components

OSF DCE Administration Guide—Core Components

You can show information about multiple users by specifying a list of user names as an

argument to the user create operation.

8.3 Deleting a User

When users leave your organization, you might need to delete the user from the cell. Use

the user delete command to do this. This operation removes the principal name from the

registry which, in turn, deletes the account and removes the principal from any groups

and organizations. The operation also deletes the /.:/users/principalname directory and

any contents from CDS.

You need numerous permissions, such as those generally associated with cell

administrator, to delete a user. See the user(8dce) reference page.

The following example operation removes user P_Pestana from the cell:

dcecp> user delete P_Pestana

You can remove multiple users from your cell by specifying a list of user names as an

argument to the user delete operation, as follows:

dcecp> user delete {W_Rosenberry J_Hunter P_Pestana}

If you have permissions in a foreign cell, you can remove one or more users from that

cell by specifying the global principal name of the users to be deleted. For example:

dcecp> user delete /.../their_cell.goodco.com/J_Jones

8.4 Modifying or Extending the User Object

The user task object is implemented as a script so that administrators can modify or

extend it on a per-site basis. For example, administrators might want to add GDS and

DFS information to the object. Other possible modiﬁcations include the following:

• Changing the location of the CDS directory created for users, or removing it

completely.

• Changing the default ACLs placed on the various objects.

• Adding an option to give users write access to the clearinghouse where the master

replica of the /.:/users/username directory resides. This allows users to create their

own subdirectories. The option could add individual principal names to the

clearinghouse ACL. An easier method could add principals to a group that has write

access to the clearinghouse.

8− 4 Tandem Computers Incorporated 124243