HP Distributed Print Service Administration Guide

Chapter 8 237
Managing DCE Security for HPDPS
Giving Your DCE Groups Permissions to HPDPS Objects
Giving Your DCE Groups Permissions to
HPDPS Objects
When you have set up groups of users according to your organizational
requirements, you need to give the groups appropriate permissions to
your HPDPS objects.
Understanding Where HPDPS Security Information is
Stored
Part of DCE is a directory tree called the DCE namespace .
One branch of this directory tree is created by the pddcesetup command
and is dedicated to storing HPDPS security information. This is your
HPDPS cell directory structure. One branch of your HPDPS cell
directory structure is dedicated to storing the permissions that each
HPDPS object grants to each DCE group or principal. This is the
/.:/subsys/pd/servers/srvr_objs directory. This section refers to
this directory as the "security directory".
To make administering HPDPS security easier, HPDPS also provides a
soft link, or alias, which you can use to set permissions to both the
security directory as a whole, and to namespace entries contained within
the security directory. The soft link is/.:/pdsec. For example, compare:
/.:/subsys/pd/servers/srvr_objs/Super203/printer/PhysPrt1
with
/.:/pdsec/Super203/printer/PhysPrt1
These each refer to the same entry in the security directory, the entry for
the physical printer PhysPrt1. Examples in this section use the pdsec
soft link, rather than the full path of the security directory. Note that the
PhysPrt1 entry listed here also references the entry in the security
directory for the supervisor in which PhysPrt1 is contained, Super203.
The entry for the supervisor object Super203 is itself a directory, which
contains the printer directory.
A printer directory is created automatically for every supervisor when
the supervisor is created. For every physical printer object contained in
the Super203 supervisor, there is a corresponding entry in the
/.:/pdsec/Super203/printer directory. A log directory and an other