OSF DCE Administration Guide--Introduction

OSF DCE Administration Guide—Introduction

manages the Security server but does not control the DFS ﬁlespace.

Following are some of the groups created when you conﬁgure DCE using the DCE

conﬁguration script:

• sec-admin

This group administers Security servers, registry replication, and other Security

functions.

• cds-admin

This group administers CDS servers, CDS replication, and other CDS functions.

• dts-admin

This group administers DTS servers and related DTS functions.

• dfs-admin

This group administers DFS ﬁle servers and related DFS functions.

• audit-admin

This group administers the Audit deamon and related Audit Service functions.

See Section A.2.3 for a list of DCE groups created by the DCE conﬁguration script.

In addition to the administrative groups, individual users need permission to control

some information kept in the registry database. For example, a user needs to be able to

change her or his password, home directory, or login shell.

2.4 The Filespace

The following subsections contain guidelines for planning your cell’s ﬁlespace. The

explains some of these planning considerations in more detail.

The ﬁlespace begins under the cell root at the /.:/fs junction to DFS from the CDS

namespace. The notation /: is set up by default to be equivalent to /.:/fs. Thus, the

notation /:/usr/user_name is equivalent to /.:/fs/usr/user_name.

Some parts of DFS run in the host machine’s kernel. This kernel function must be

present on your machine before you run DFS.

2.4.1 DFSAdministrative Domains

A DFS administrative domain is a collection of machines in the same cell that are

conﬁgured for administration as a single unit. In a single cell you can have one or many

administrative domains, depending on the size of your organization. Organizing DFS

server machines into different administrative domains simpliﬁes the management of the

cell ﬁlespace by creating smaller units for administration. All machines within an

administrative domain must be in the same cell.

2− 12 Tandem Computers Incorporated 124244