OSF DCE Administration Guide--Core Components

Chapter 41. Accessing Registry Objects
This chapter describes the permissions that apply to objects in the registry. Because the
permissions that are granted are based on the way the registry database is structured, this
chapter first briefly describes the structure of the registry database. It then describes the
permissions for each object in the registry database, the registry ACL managers, and the
initial registry ACLs.
Both dcecp and the acl_edit command have functions for creating, modifying, and
deleting ACL entries for registry objects. See each command’s reference page in the
OSF DCE Administration Reference for a description of the operations it performs on
ACL entries.
41.1 The Registry Database
The registry is structured into the following main directories:
• The principal directory—Contains information about principals
• The group directory—Contains information about groups
• The org directory—Contains information about organizations
In addition to the directories, the registry contains the policy object, the replist object,
and the xattrschema object, all of which are created when the registry is created during
machine configuration. The policy object contains information that applies to registry
properties and policies and organization policies; the replist object contains information
about the replicas in the DCE cell; and the xattrschema object contains information
about extended registry attributes (ERAs). You can modify policy and replica
information at any time by using the dcecp registry commands. The xattrschema
object is modified by using the dcecp xattrschema commands.
When you create simple objects in the principal, group,ororg directory, subdirectories
are created as needed. For example, if you add a principal such as preludes/villa/lobos,
the subdirectories preludes and villa are created. You can use these subdirectories to
help organize your data. When you delete all objects in a subdirectory, the subdirectory
itself is deleted. (You cannot delete the principal, group,ororg directory.)
124243 Tandem Computers Incorporated 41−1