HP Distributed Print Service Administration Guide

Chapter 8 249
Managing DCE Security for HPDPS
Giving Your DCE Groups Permissions to HPDPS Objects
1. If you have not already done so, log in to DCE as the cell
administrator. For example, if the cell administrator DCE login is
cell_admin, enter:
dce_login cell_admin
When prompted, enter the cell administrator password.
2. Use the acl_edit command to remove permissions for
unauthenticated.
• Use the -e flag because you are modifying an object ACL rather
than an IO or IC ACL.
• Use the pdsec soft link.
• Use the -d flag to delete an entry from the ACL. For example,
enter:
acl_edit -e /.:/pdsec/Spool1/printer/LogPrt1Restrict \
-d unauthenticated:
3. Remove permissions for any_other.
• Use the acl_edit command.
• Use the -e flag because you are modifying an object ACL rather
than an IO or IC ACL.
• Use the pdsec soft link.
• Use the -d flag to delete an entry from the ACL.
For example, enter:
acl_edit -e \
/.:/pdsec/Spool1/printer/LogPrt1Restrict -d any_other:
The logical printer LogPrt1Restrict now no longer has access to
unauthenticated or any_other.
NOTE You can also use the /opt/dce/bin/cdsbrowser tool to examine and
modify security. However, in cdsbrowser, you specify the full path
instead of the soft link.