VMS Help DCE_SECURITY, Admin Intro, rgy_edit, miscellaneous_commands  *Conan The Librarian (sorry for the slow response - running on an old VAX)

   Miscellaneous Commands

1 - domain

   do[main] [p | g | o | a]

   Changes or displays the type of registry information being viewed or
   edited.

   You can specify p for principals, g for groups, o for organizations,
   or a for accounts. If you supply no argument, rgy_edit displays the
   current domain.

2 - site

   si[te] [[name]] [-u[pdate]]

   Changes or displays the registry site being viewed or edited.

   The name variable is the fully qualified name of the cell that
   contains the registry to which you want access. If you supply no
   argument, rgy_edit displays the current site.

   The -update option indicates you want to talk to an update site in
   the specified cell.

3 - properties

   prop[erties] Changes or displays registry properties.

   This command prompts you for changes. Press <Return> to leave
   information unchanged.

4 - policy

   po[licy] [organization_name] [-al lifespan | forever]
            [-pl passwd_lifespan | forever]
            [-px passwd_exp_date | none] [-pm passwd_min_length]
            [-pa | -pna] [-ps | -pns]

   Changes or displays registry standard policy or the policy for an
   organization.

   Enter organization_name to display or change policy for that
   specific organization.  If you do not enter organization_name the
   subcommand affects standard policy for the entire registry.

   The -al option determines the account's lifespan, the period during
   which accounts are valid.  After this period of time passes, the
   accounts become invalid and must be recreated.   An account's
   lifespan is also controlled by the add and change subcommands -x
   option.  If the two lifespans conflict, the shorter one is used.
   Enter the lifespan in the following in the following format:

       weekswdaysdhourshminutesm

   For example, 4 weeks and 5 days is entered as 4w5d.

   If you enter only a number and no weeks, days, or hours designation,
   the designation defaults to hours.  If you end the lifepan with a
   number and no weeks, days, or hours designation, the number with no
   designation defaults to seconds.  For example, 12w30 is assumed to be
   12 weeks thirty seconds.

   The -pl option determines the password lifespan, the period of time
   before account's password expires. Generally, users must change
   their passwords when the passwords expire. However, the policy to
   handle expired passwords and the mechanism by which users change
   their passwords are defined for each platform, usually through the
   login facility.

   Enter passwd_lifespan as a number indicating the number of days.
   If you define a password lifespan as forever, the password has an
   unlimited lifespan.

   The -px option specifies the password expiration date in
   yy/mm/dd/hh.mm:ss format. Generally, users must change their
   passwords when the passwords expire. However, the policy to
   handle expired passwords and the mechanism by which users change
   their passwords are defined for each platform, usually through
   the login facility.

   If you define a password expiration date as none, the password has
   an unlimited lifespan.

   The -pm, -ps, -pns, -pa, and -pna options all control the format of
   passwords as follows:

     +  -pm - Specifies the minimum length of passwords in characters.
        If you enter 0, no password minimum length is in effect.

     +  -ps and -pns - Specify whether passwords can contain all spaces
        (-ps) or can not be all spaces (-pns).

     +  -pa and -pna - Specify whether passwords can consist of all
        alphanumeric characters (-pn) or must include some non-
        alphanumeric characters (-pna).

5 - auth_policy

   au[th_policy]

   Changes and/or displays registry authentication policies.

   This command prompts you for changes. Press <Return> to leave
   information unchanged.

6 - defaults

   def[aults]

   Changes or displays the home directory, login shell, password valid
   option, account expiration date, and account valid option default
   values that rgy_edit uses.

   This command first displays the current defaults.  It then prompts
   you for whether or not you want to make changes. If you make
   changes, defaults immediately changes the defaults for the current
   session,  and it saves the new defaults in sys$login:.rgy_editrc.
   The newly saved defaults are used until you change them.

7 - help

   h[elp] [command

   Displays usage information for rgy_edit.

   If you do not specify a particular command, rgy_edit lists the
   available commands.

8 - quit

   q[uit]

   Exit rgy_edit.

9 - exit

   e[xit]

   Exit rgy_edit.

10 - login

   l[ogin]

   Lets you establish a new network identity for use during the
   rgy_edit session.

   The rgy_edit login command prompts for a principal name and
   password.

11 - scope

   sc[ope] [name]

   Limits the scope of the information displayed by the view subcommand
   to the directory (specified by name) in the registry database.