OSF DCE Application Development Guide--Core Components

OSF DCE Application Development Guide—Core Components
Replaces only the account data that is accessible to the user of the account
27.2.3 Registry Properties and Policies
The following subsections outline some registry API parameters that affect the cell as a
whole, and the routines that enable an application to retrieve and set values for them.
27.2.3.1 Registry Properties
Several registry parameters and flags affect all accounts in the registry. These registry
properties include the following:
• The version number of the registry software used to create and read the registry
• The name and UUID of the cell associated with the registry, and whether the current
registry site is an update site or a query site
• Minimum and default lifetimes for certificates of identity issued to principals
• Bounds on the UNIX numbers used for principals, and whether the UUIDs of
principals also contain embedded UNIX numbers
The routines associated with this parameter set are
• sec_rgy_properties_get_info()
• sec_rgy_properties_set_info( )
27.2.3.2 The Registry Authentication Policy
Another set of parameters affecting all principals is the registry authentication policy.
This set only controls the maximum lifetime of certificates of identity, upon first issue
and renewal. Accounts also have authentication policies, and the policy in effect for any
principal is the most restrictive combination of the registry policy and the policy for a
principal’s account. The associated routines are
• sec_rgy_auth_plcy_get_info( )
• sec_rgy_auth_plcy_get_effective( )
• sec_rgy_auth_plcy_set_info( )
27−6 Tandem Computers Incorporated 124245