OSF DCE Administration Guide--Core Components

Maintaining Policies and Properties
35.1.5 Displaying and Setting Standard and Authentication Policies
To display policy:
• For the registry as a whole, use the dcecp registry show command with the
-policies option.
• For an individual organization or account, use the dcecp organization show
command with the -policies option (for standard policies) or the dcecp account
show command with the -policies option (for authentication policies).
To set policy:
• For the registry as a whole, use the dcecp registry modify command. The
following sample command uses the pwdlife option to set the password lifespan
policy for the registry as a whole to 180 days:
dcecp> registry modify -pwdlife 180
• For an individual organization or account, use the dcecp organization modify
command for standard policies or the dcecp account modify command for
authentication policies. The following sample command uses the -pwdlife attribute
option to set the password lifespan policy for the organization classic to unlimited:
dcecp> organization modify classic -pwdlife unlimited
Note that the previous examples all use attribute options. You can also set policy by
using the dcecp registry modify, dcecp account modify, and dcecp organization
modify commands with the -change option and attribute lists. For example, to use an
attribute list to set the password lifespan policy for the organization classic to
unlimited, the command would be as follows:
dcecp> organization modify classic -change {pwdlife unlimited}
35.2 Properties
The dcecp registry modify command sets properties for the registry as a whole. The
properties that you can set are described in the following subsections.
35.2.1 Default Ticket Lifetime Property
The default ticket lifetime is the default lifetime in hours for tickets that are issued to
principals in the registry.
124243 Tandem Computers Incorporated 35−7