OSF DCE Administration Guide--Core Components

OSF DCE Administration Guide—Core Components

The following ﬁles make up the local registry database:

dcelocal/var/security/lrgy_data

Contains account information entries.

dcelocal/var/security/lrgy_tgts

Contains ticket-granting ticket entries.

dcelocal/var/security/lrgy_lock

Used by the security server to lock the registry for read/write

operations.

You must use the security command rgy_edit to maintain the local registry. The

following subcommands are available:

view To view all entries in the local registry.

delete principal_name

To delete the principal speciﬁed by principal_name from the registry.

properties To set and view properties for the local registry.

help To obtain help information on the local registry.

In addition to the subcommands in the preceding list, the rgy_edit command provides

one additional subcommand, purge, and an additional registry property, called the

registry capacity, to restrict the number of entries that are in the local registry.

The remainder of this section describes the purge subcommand and the registry

capacity property. See the rgy_edit(8sec) reference page information on the use of the

other subcommands.

31.7.1 The Registry Capacity Property

The rgy_edit properties command lets you set a limit on the number of entries that the

local registry can contain. For example, assume that the registry capacity is set to 10 and

that the registry contains 10 entries. If a new user logs in from the local machine, an

entry is created for that user. This new entry overwrites the oldest of the original 10

entries. As users log in from the machine for the ﬁrst time, their newly created registry

entry overwrites the oldest entry.

31.7.2 Setting the Capacity and Lifespan Properties

You can set a limit on the number of entries that the local registry can contain. This

limit is deﬁned by the Capacity attribute of the local registry object. Setting the value

of this attribute to a moderate number of entries can keep the local registry from

growing too large.

For example, assume that the Capacity attribute value for the local registry on a

machine is set to 10 and that the local registry contains 10 entries. If a new user logs in

31 − 20 Tandem Computers Incorporated 124243