VMS Help DCE_SECURITY, Admin Intro, rgy_edit, local_registry_commands  *Conan The Librarian (sorry for the slow response - running on an old VAX)

   Commands for the Local Registry

   To edit or view the local registry, invoke rgy_edit with the -l option
   while you are logged into the machine whose local registry you want to
   maintain.  This section lists the commands that are valid for editing
   or viewing the local registry.  When you invoke rgy_edit with the -l
   option, only the subcommands and options listed here can be used.

1 - view

   v[iew]

   Displays local registry entries.

2 - delete

   del[ete] principal_name

   Deletes the account and credential information for principal_name
   from the local registry.

3 - purge

   pu[rge]

   Purges expired local registry entries.

   This command has no options or arguments.

   The time limit, or lifespan, for which an entry in the local
   registry is valid is set as a property of the local registry
   with the properties subcommand.  When the purge subcommand is
   run, it deletes all expired entries.  The lifespan begins when
   an entry for the principal is added to the local registry (that
   is, the beginning of the lifespan is the last time the principal
   logged in to the local machine.) The lifespan ends after the time
   limit set as a local registry property.

4 - properties

   pr[operties]

   Changes and/or displays local registry properties and policies.

   This command displays the current properties and then prompts for
   whether you want to make changes to them.  You can change the local
   registry's:

     +  Capacity - A number representing the total number of entries
        the local registry can contain at any one time. When the
        capacity is reached, subsequent new entries overwrite the
        oldest entries.

     +  Account lifespan - The time in which an account in the local
        registry is valid in the following format:

            weekswdaysdhourshminutesm

        For example, 4 weeks and 5 days is entered as 4w5d.  If you
        enter only a number and no weeks, days, or hours designation,
        the designation defaults to hours.  If you end the lifepan with
        a number and no weeks, days, or hours designation, the number
        with no designation defaults to seconds.  For example, 12w30
        is assumed to be 12 weeks thirty seconds.