OSF DCE Administration Guide--Core Components

OSF DCE Administration Guide—Core Components
TABLE 20-1. Permissions Required To Create Target Objects
________________________________________________
Objects Required Permissions
________________________________________________
________________________________________________
Write permission to the
clearinghouse that is to store the
master replica of the new
directory.
Insert and read permissions to the
parent of the new directory.
Insert and read permissions to the
initial container for the new
directory.
The server principal also needs
read and insert permissions to the
parent directory of the new
directory.
directory
________________________________________________
Insert and read permissions to the
directory where it is to be created.
Insert and read permissions to the
initial object for its object type.
other CDS object
________________________________________________
20.4 Merging CDS Directories into a Foreign Cell
You can also use the directory merge command to merge CDS directories into the
namespace of a foreign cell. In general, the procedure you follow is the same as the
procedure you use to merge directories or subtrees in the same namespace. There are,
however, some additional considerations to keep in mind:
• You need to establish cross-cell authentication in advance.
• You need to merge the entire directory hierarchy in the source and target cells.
Also, you need to modify the ACLs of the newly created target objects as when you
merge directories in the same namespace.
20.4.1 Establishing Cross-Cell Authentication
If you want users and applications in the source cell to be able to continue accessing
their merged information in the target cell conveniently, make sure that an agreement of
cross-cell authentication exists between the source cell and foreign (target) cell.
Otherwise, principals from the source cell requesting newly merged information will not
be permitted to communicate with the target cell. See Part 6 for complete information
on how to set up cross-cell authentication.
20 − 8 Tandem Computers Incorporated 124243