HP Distributed Print Service Administration Guide

Chapter 8 243

Managing DCE Security for HPDPS

Giving Your DCE Groups Permissions to HPDPS Objects

NOTE The following procedure modiﬁes the IC ACL of the /.:/pdsec directory,

which propagates to the object ACL of all of the HPDPS servers. It also

modiﬁes the IO ACL of the /.:/pdsec directory, which propagates to the

object ACLs of all of the HPDPS objects contained in the servers.

Depending on what you want to accomplish, you can modify either one or

the other, but not both.

Giving a Group Permission to the Security Directory IO and IC

ACLs

Give the Dept_6_OPs group read and write permission for theIO and IC

ACLs of the security directory. Follow these steps:

1. If you have not already done so, log in to DCE as the cell

administrator. Enter the command:

dce_login cell_admin

When prompted, enter the cell administrator password.

2. Use the acl_edit command to give the Dept_6_OPs group read and

write permission for the IO ACL of the security directory.

• Use the pdsec soft link

• Use the -io ﬂag to specify the IO ACL

• Use the -m ﬂag to modify the ACL. For example, enter:

acl_edit /.:/pdsec -io -m group:Dept_6_OPs:rw

3. Give the Dept_6_OPs group read and write permission for the IC

ACL of the security directory. For example, enter:

acl_edit /.:/pdsec -ic -m group:Dept_6_OPs:rw

The Dept_6_OPs group now has read and write permission for both the

IC and IO ACLs of the security directory.

Use the acl_edit command to view the changes you have made. For

example,to view the IO permissions of the/.:/pdsec directory, use these

commands:

1. Specify the IO ACL. For example, enter:

acl_edit /.:/pdsec -io