OSF DCE Administration Guide--Core Components

OSF DCE Administration Guide—Core Components
_________________________________________________________________________
Commands Required Permissions
_________________________________________________________________________
_________________________________________________________________________
Delete permission to the soft link, or administer
permission to the directory that stores the soft link to
be deleted.
link delete
_________________________________________________________________________
Write permission to the soft link whose attributes are
to be modified.
link modify
_________________________________________________________________________
Read permission to the soft link whose attributes are to
be listed.
link show
_________________________________________________________________________
Table 16-3 lists commands for operating on CDS objects that are only provided by the
CDS control program (cdscp), along with their execute permissions.
TABLE 16-3. CDS Control Program Commands and Required Permissions
__________________________________________________________________________
Commands Required Permissions
__________________________________________________________________________
__________________________________________________________________________
Write permission to the clerk.disable clerk
__________________________________________________________________________
Write permission to the server.disable server
__________________________________________________________________________
No permissions are needed.set cdscp confidence
__________________________________________________________________________
Administer permission to the directory. The server
principal needs administer, read, and write permissions to
the directory. When designating a new master replica,
you also need write permission to the clearinghouse that
stores the new master replica, and the server principal
needs write permission to each clearinghouse where the
replica type is changed to read-only.
set directory to new epoch
__________________________________________________________________________
No permissions are needed.show cdscp confidence
__________________________________________________________________________
Read permission to the cell root directory.show cell
__________________________________________________________________________
Read permission to the clerk.show clerk
__________________________________________________________________________
Read permission to the server.show server
__________________________________________________________________________
16.8 Editing ACLs on CDS Names
To edit an ACL that is associated with an entry in the CDS namespace for a child
directory, clearinghouse, soft link, or some other CDS object, specify the -entry option
to any dcecp acl command. The -entry option is especially useful in case of an
ambiguous pathname. In some cases, a pathname can resolve to a leaf object in the
DCE Directory Service and to an object in some other DCE component that supports
ACLs. In these cases, you must use the -entry option to edit the leaf object in CDS.
You do not need to specify this option to edit ACLs that are associated with actual
clearinghouses or directories.
16 − 10 Tandem Computers Incorporated 124243