OSF DCE Administration Guide--Introduction

Overview of DCE Maintenance
• Forcing the Cache Manager to discard or fetch a new version of a file or directory
from the File server machine
5.7.5 DFSSecurity and Access Control
In DFS, you can set up administrator groups with special privileges that permit members
of a group to do the following:
• Issue administrator commands.
• Create or remove filesets.
• Perform system backups.
In DFS, administrative lists define the principals that can perform actions affecting
specific server machines. Use the bos commands to create and maintain administrative
lists. Use the dcecp program to create administrative groups and place these groups on
administrative lists. Adding and removing users from groups rather than altering the
administrative lists themselves simplifies system administration.
Groups of DFS server machines that are administered as a single unit are known as DFS
administrative domains. Whenever you add or remove server machines in a DFS
domain, you must also alter the keytab file for that machine. A keytab file contains a
server encryption key, which is used to provide security between servers and their
clients. Use the bos commands to maintain a server’s keytab file.
To verify or modify ACLs, use the dcecp program’s acl commands.
5.8 Shutting Down DCE
When you wish to shut down the DCE processes, you can use the dce_config script
(option 4 in the Main Menu), which calls the dce_shutdown script, or you can run the
dce_shutdown script directly. To run the dce_shutdown script, enter the following
command:
sh /etc/dce_shutdown
124244 Tandem Computers Incorporated 5− 13