OSF DCE Administration Guide--Core Components

Creating and Maintaining Principals, Groups, and Organizations

30.8.2 Adding and Deleting Group Members

The following example shows the use of the dcecp group add command with the

-member option to add mahler to the group symphonists and delete strauss from the

group symphonists:

dcecp> group add symphonists -member mahler

dcecp> group remove symphonists -member mahler

You can add and remove mutiple members with one group add or group remove

command. To do so, enclose the member names in quotes, separated by spaces. For

example, to add the principals bach, britten, and mahler to the group symphonists,

you would enter the following:

dcecp> group add symphonists -member {bach britten mahler}

In the unusual case where you are changing a host’s group name information while the

host is logged into a DCE cell, the existing host credentials will become invalid unless

you perform extra steps to update the host credentials with the new group name

information.

Host credentials are managed by the secval process, which performs security client

functions on a DCE host. Normally, just after the host starts, the secval process logs

the host into the DCE cell, getting the host credentials and storing them on the host.

Deactivate and reactivate the secval process to update these credentials after changing

the group name information. The following example illustrates these operations on

remote host persephone:

dcecp> secval deactivate /.:/hosts/persephone/conﬁg/secval

dcecp> secval activate /.:/hosts/persephone/conﬁg/secval

30.9 Creating and Maintaining Aliases for Principals or

Groups

Use the dcecp principal create command to create an maintain aliases for principals

and groups. Organizations cannot be given aliases.

30.9.1 Creating Aliases

To create an alias for a principal, enter the dcecp principal create command in the

following form:

124243 Tandem Computers Incorporated 30− 19