OSF DCE Application Development Guide--Core Components

The Registry API
27.2.2 Creating and Maintaining Accounts
The login-name field of an account contains a principal name, a primary group name, and
an organization name. The account may also contain a project list (also known as a
concurrent group set) that specifies all the groups to which the principal corresponding
to the account belongs, but the login-name field itself specifies only one group name.
An account can be added to the registry database only when all of its constituent PGO
items are established. For instance, to create an account with the principal name tom,
the group name writers, and the organization name rd, all three names must exist as
individual PGO items in the database; and the writers group and the rd organization
must specify that tom is a member.
When an account is created with sec_rgy_acct_add() (and if a project list is enabled for
the new account), the call scans the groups in the registry and creates a project list
containing all the groups in which the principal name appears. Subsequently, the project
list may be modified with the sec_rgy_pgo_add_member( ) and
sec_rgy_pgo_delete_member() calls.
The following calls create and maintain accounts:
• sec_rgy_acct_add()
Adds an account to an existing principal item
• sec_rgy_acct_delete( )
Deletes an account, leaving the principal item
• sec_rgy_acct_rename( )
Changes an account login name, perhaps moving the account to a different principal
item
The following calls return the information in an account:
• sec_rgy_acct_get_projlist( )
Returns the project list for an account
• sec_rgy_acct_lookup( )
Returns all the account data
The following calls modify the information in an account:
• sec_rgy_acct_passwd( )
Changes an account password
• sec_rgy_acct_replace_all( )
Replaces all of an account’s data
• sec_rgy_acct_admin_replace( )
Replaces only the administrative account data
• sec_rgy_acct_user_replace()
124245 Tandem Computers Incorporated 27−5