OSF DCE Administration Guide--Core Components

OSF DCE Administration Guide—Core Components
31.5.1 Setting Ticket Lifetimes ............31-10
31.5.2 Ticket-Granting Ticket Lifetimes and Service Ticket
Lifetimes .................31-11
31.5.3 Adding Accounts Example ............31-11
31.5.4 Modifying Accounts .............31-12
31.5.5 Deleting Accounts ..............31-13
31.6 Creating, Maintaining, and Deleting Keytab Files .......31-13
31.6.1 The Keytab File ...............31-13
31.6.2 Creating and Maintaining Keys and Keytab Files .....31-15
31.6.3 Changing Server and Machine Passwords in the Keytab
File ................... 31-19
31.6.4 Handling Compromised Server or Machine Passwords in the
Keytab File ................31-19
31.7 Maintaining the Local Registry .............31-19
31.7.1 The Registry Capacity Property ..........31-20
31.7.2 Setting the Capacity and Lifespan Properties ......31-20
31.7.3 Purging Expired Entries ............. 31-22
Chapter 32. Creating and Using Extended Registry Attributes .......... 32-1
32.1 The xattrschema Object ............... 32-1
32.2 Creating and Maintaining Attribute Types .......... 32-2
32.2.1 Creating Attribute Types ............ 32-2
32.2.2 Modifying Attribute Types ............ 32-4
32.2.3 Renaming Attribute Types ............ 32-5
32.2.4 Deleting Attribute Types ............ 32-5
32.2.5 Defining the ACL Managers for Attributes ....... 32-6
32.2.6 Defining Attribute Type Encoding ......... 32-7
32.3 Defining Attribute Trigger Servers ............ 32-8
32.3.1 The -trigtype Option .............. 32-9
32.3.2 The -trigbind Option ............. 32-9
32.4 Creating and Maintaining Attribute Instances .........32-12
32.4.1 Attaching Attribute Instances to Objects ........ 32-12
32.4.2 Modifying Attribute Instances ...........32-13
32.4.3 Deleting Attribute Instances ...........32-14
32.4.4 Using Attribute Sets .............. 32-14
Chapter 33. Administering a Multicell Environment ............ 33-1
33.1 Trust Relationships ................. 33-1
33.1.1 Direct Trust Relationships ............ 33-2
33.1.2 Transitive Trust Relationships ........... 33-2
33.1.3 Establishing Trust Relationships .......... 33-3
33.1.4 Constraints on Transitive Trust Relationships ...... 33-4
33.2 Creating Trust Relationships .............. 33-8
33.2.1 Command Options for the registry connect
Command ................. 33-8
33.2.2 Creating Cross-Cell Authentication Accounts
Example ................. 33-9
33.2.3 The Accounts Created by the registry connect
Command .................33-10
33.3 Modifying Cross-Cell Authentication Accounts ........33-11
Chapter 34. Viewing Registry Information ............... 34-1
xiv Tandem Computers Incorporated 124243