OSF DCE Administration Guide--Core Components

Chapter 38. Setting Up the Registry
This chapter describes the steps that you take to set up the registry in the DCE Security
Service. Some of these steps are automatically handled by the dce_config script during
DCE installation and configuration; others are performed by you, using the DCE utilities
and control programs. The steps for setting up the registry are as follows:
1. Plan where the security service components are to be located in your network.
2. Create the master registry database (performed by the dce_config script during
system configuration).
3. Start the master replica (performed by the dce_config script during system
configuration).
4. Populate the registry database (performed by you using the dcecp rgy_edit
command).
• Set policies and properties.
• Add names and accounts.
5. Create a slave database and start the slave replica (performed by the dce_config
script during system configuration).
6. Set up cron to run passwd_export on all of the DCE-based machines to ensure
that the local password and group files are kept consistent with the registry
(performed by you using standard UNIX commands). The passwd_export
command is described in Chapter 36.
Because the registry uses the Cell Directory Service (CDS) to obtain information about
network resources, this chapter assumes that your network is configured properly for
CDS operation.
38.1 Planning Sites for DCE Security Service Components
The first thing that you do to configure the security service in your network is choose the
sites for the master replica and any slave replicas of the registry. These sites will run
secd, the security server. Machines running secd must be up and available at all times.
124243 Tandem Computers Incorporated 38−1