OSF DCE Administration Guide--Core Components

Setting Up the Registry
-slave Specifies that a slave replica’s database should be created. Only the -
myname, -keyseed, and -verbose options can be used with the -slave
option.
-my[name] my_server_name
This is a name that you assign to the security server (secd) on this
machine. It is used by the name service to locate this cell’s security
server.
-k [ eyseed] keyseed
This is a character string that you enter to seed the random key generator
in order to create the master key for the database that you are creating. It
should be a string that cannot be easily guessed. The master key is used
to encrypt all account passwords. Each instance of a replica (master or
slave) has its own master key. You can change the master key by using
the dcecp registry modify command or sec_admin master_key
command. (See Chapter 36 for information on the use of the dcecp
registry modify command for modifying the master key. If you do not
enter this option, sec_create_db prompts you for it.
-cr[eator] creator_name
This is the name of the registry creator. The registry creator is the initial
privileged user of the registry database. Note that you can give
equivalent privileges to another user at any time by using the dcecp acl
modify command or acl_edit modify command to change the registry
database ACL. When the registry is created, default ACL entries for
registry objects are also created. These entries give the most privileged
permissions to the principal that is named in the -cr option. If the
principal that is named as the registry creator is not one of the reserved
names, sec_create_db adds the principal and an account for that
principal. If you do not enter this option, the initial privileged user of the
registry database is root.
-cu [nix_id] creator_unix_id
This is a UNIX number that you specify to be assigned to the registry
creator. If you do not enter this option, the registry creator’s UNIX
number is assigned dynamically.
-u [uid] cell_uuid
This is the cell’s UUID. If you do not enter this UUID, it is assigned
dynamically.
-p [ erson_low_unix_id] unix_id
This is the starting point for UNIX IDs that are automatically generated
when a principal is added by using the dcecp registry modify command
or rgy_edit properties command. Note that you can explicitly assign a
lower UNIX ID than this number; this lower limit applies only to
automatically generated UNIX IDs.
124243 Tandem Computers Incorporated 38−3