OSF DCE Administration Guide--Introduction

Overview of DCE Maintenance
— Create new objects in directories or oversee their creation. (Beyond a certain
level in the directory hierarchy, you also can delegate the responsibility of
maintaining directories and the objects in them.)
— Add new administrators to the cds-admin security group.
Chapters 16, 17, 18, and 20 of the provide detailed information about how to perform
these tasks.
5.3.3 CDSSecurity and Access Control
The DCE control program (dcecp) and CDS ACL Manager work together to manage
authorization in CDS. To modify, add, delete, or view ACL entries in the CDS
namespace, use the dcecp program’s acl commands. When the dcecp program) issues a
request to perform an operation on a CDS object, the CDS ACL Manager checks
permissions, based on ACL entries, and grants or denies the request. The CDS ACL
Manager is an integral part of the cdsd and cdsadv processes.
Chapter 16 of the provides detailed information about handling CDS security and access
control, including guidelines for setting up access control in a new namespace.
5.4 GDS Maintenance Tasks
GDS provides a menu-driven interface for performing the maintenance tasks described
in the following subsections. For more detailed information on the GDS maintenance
tasks, see the .
5.4.1 Monitoring GDS
You can monitor GDS by displaying directory system status information with the GDS
interface or by using the trace system to log directory processes.
The GDS interface allows you to do the following:
• Display directory system status information, which shows if a directory is active or
inactive, what processes are available, how many processes are available, and if the
trace system is active or inactive.
• Activate the trace system, which starts the trace system for logging directory
processes.
• Deactivate (or stop) the trace system.
For more information on these functions, see the .
124244 Tandem Computers Incorporated 5−5