OSF DCE Administration Guide--Core Components

OSF DCE Administration Guide—Core Components
dcecp> acct mod smitty -password [acct gen smitty] \
-mycurrentpwd -dce-
30.6.4 Managing Password Expiration
By default, the DCE security server disables logins for principals whose passwords
have expired. There may be cases where you would prefer this not to happen; for
instance, you probably don’t want cell_admin to be locked out of the cell because of
an expired password.
You can manage password expiration checking for a given principal by attaching an
instance of the passwd_override ERA to the principal and specifying one of the
following values:
0 (NONE) Specifies that password expiration checking for the principal should
not be overridden (that is, the principal should not be permitted to log in with
an expired password.) Specifying 0 ( NONE) is equivalent to not attaching an
ERA instance to the principal.
1 (OVERRIDE) Specifies that password expiration checking for the principal
should be overridden (that is, the principal should be permitted to log in with
an expired password.)
The following is an example of a dcecp command to create a principal and attach the
passwd_override ERA:
dcecp> principal create smitty -attribute {passwd_override 1}
For further information on how to use dcecp to attach ERAs to principals, see Chapter
32.
30.7 Adding and Maintaining Groups and Organizations
A group or organization must have been added to the registry before it can be used in
an account. When you add groups by using the dcecp group create command, you
can set a project list inclusion property that controls whether individual groups are
included in project lists. (Project lists do not apply to organizations.)
30.7.1 Project Lists
A principal’s project list is a list of all the groups in which a principal or alias is a
member. When a principal tries to access an object, the principal has the access rights
that accrue from membership in every group that is named in the object’s ACL. (See
30 −14 Tandem Computers Incorporated 124243