OSF DCE Administration Guide--Introduction

Overview of DCE Maintenance
time providers and the network systems have been running for some time. The clock set
command accomplishes this task by gradually modifying the time.
The clock set command used with the -abruptly option and the dts synchronize
command provide additional methods for adjusting the system clock and synchronizing
systems.
5.6 Security Service Maintenance Tasks
The following subsections summarize the maintenance tasks you perform while
administering the Security Service. For more detailed information on Security
maintenance tasks, see the .
5.6.1 Managing the Security Service
The Security Service management tasks include the following:
• Creating and maintaining accounts by using the dcecp program
The dcecp program provides commands for creating and maintaining registry
information, including persons, groups of users, and accounts.
Keep the following things in mind when administering DCE accounts:
— If you share files with other systems that do not use the registry, be sure that
names, UNIX IDs, and account information are consistent between the registry
and the foreign password and group files. Use passwd_import to identify and
resolve any conflicts that exist. Chapter 39 of the describes how
passwd_import works.
— If you maintain /etc/passwd and /etc/group files in standard UNIX format, you
need to run passwd_export to make password, group, and organization files on
local machines consistent with the registry. See Chapter 36 of the for more
information about the passwd_export command.
— For principals in other cells to access objects in your cell, you need to set up a
special account for the foreign cell in your cell’s registry. This account indicates
that you trust the Authentication Service in the foreign cell to correctly
authenticate its users. Use the dcecp program’s registry connect command to
create an account for a foreign cell.
• Using ACLs
Use the dcecp program’s acl commands to display, add, modify, and delete ACL
entries for a specific object in the cell namespace. (See the for detailed information
on how to use the dcecp program’s acl command.)
• Setting and maintaining registry policies
124244 Tandem Computers Incorporated 5−9