unixdev.net


Switch to SpeakEasy.net DSL

The Modular Manual Browser

Home Page
Manual: (HP-UX-11.11)
Page:
Section:
Apropos / Subsearch:
optional field



 dcecp(1m)		  Open Software Foundation		   dcecp(1m)




 NAME
      dcecp - Administrative interface for DCE management tasks

 SYNOPSIS
      dcecp [-s] [-local] [script_name | -c command ]


 OPTIONS
      -c command
		A list containing one or more valid dcecp commands.  For a
		description of the dcecp command format, see Administration
		Objects.

      -s	Turns off inheritance of the login context. The default is
		to inherit the current login context of the principal that
		invokes dcecp.

      -local	The -local option specifies that the dcecp session should
		operate on the local dced object while the dced process is
		in a partial-service state.


 ARGUMENTS
      script_name
		Filename of a user-defined script containing dcecp commands.


 DESCRIPTION
      The DCE control program, dcecp, is the primary DCE administration
      interface, providing local and remote access to routine DCE
      administrative functions from any DCE Version 1.1 and later platform.

      The DCE control program is built on a portable command language called
      the tool command language (Tcl).	Tcl allows the use of variables, if
      statements, list processing functions, loop functions and many other
      features commonly found in command languages.  dcecp extends these
      features, providing a set of commands for manipulating specific DCE
      objects.	The control program also includes task scripts to help
      administrators perform some routine DCE management functions. Refer to
      the OSF DCE Administration Guide Core Volume for information about the
      basic concepts and features of dcecp. All of Tcl (version 7.3) is
      included in the dcecp language.

    Invoking and Terminating dcecp
      The DCE control program allows you to invoke dcecp commands in the
      following modes:


	+  Interactive mode





 Hewlett-Packard Company	    - 1 -	      OSF DCE 1.1/HP DCE 1.8






 dcecp(1m)		  Open Software Foundation		   dcecp(1m)




	+  Command-line mode


      Interactive Mode
		Activate interactive mode by entering the dcecp command
		without any arguments and without the -c option.  At the
		dcecp prompt, enter a dcecp or Tcl command; dcecp executes
		the command, displays the result, and is ready to accept
		another command.

		% dcecp
		dcecp> directory list /.: -directories
		/.:/hosts /.:/subsys
		dcecp>



      Command-Line Mode
		Activate command-line mode from the system prompt by using
		one of the following methods:


		  +  Enter the dcecp command with a filename of a script
		     containing dcecp commands, other valid Tcl commands, or
		     both, as follows:


		      dcecp myown.tcl


		  +  Enter the dcecp command with the -c option followed by
		     a list containing one or more dcecp commands, as
		     follows:

		      dcecp -c directory create /.:/admin/printers


		     Enter multiple dcecp commands by separating them with a
		     ; (semicolon) and enclosing the commands in ""
		     (quotation marks). Remember to escape shell
		     metacharacters (by enclosing them in quotation marks or
		     by using the backslash character).	 Multiple commands
		     must be on a single line, as follows:

		      dcecp -c "directory create /.:/adm/printers; directory show /.:/adm/printers"

		     When you use the -c option, operation results return to
		     the interpreter, not to the shell.	 If you enter
		     multiple operations, the output of only the last
		     operation is returned to the shell. This problem can be
		     overcome by using the following ugly, but serviceable,



 Hewlett-Packard Company	    - 2 -	      OSF DCE 1.1/HP DCE 1.8






 dcecp(1m)		  Open Software Foundation		   dcecp(1m)




		     workaround:

		     % dcecp -c "puts [dir help]; puts [principal help]"


      Terminate an interactive dcecp session by using either the exit or the
      quit command.  Use the following command syntax:

      exit n

      quit n

      Use the n argument to specify the exit value returned to the shell.
      The following example terminates a session and returns an exit value
      of 56 to the shell:

      exit 56

      By default, dcecp returns 0 (zero) on success and 1 (one) if a command
      fails.

    Startup Scripts
      When you invoke dcecp, the following script files are executed in the
      order shown:


      [info library]/init.tcl
		Contains the standard Tcl initialization scripts with
		definitions for the unknown command and the auto_load
		facility.

      $dcecp_library/init.dcecp
		Contains the initialization scripts implementing the dcecp
		commands and tasks.  The implementation sets the Tcl
		variable dcecp_library to dceshared/dcecp by default.

      $HOME/.dcecprc
		Contains user customizations.


    Administration Objects
      A dcecp command has the following syntax:

      object operation [argument] [-option [opt_arg]] ...


      where:

      object	Specifies the name of a dcecp administration object.
		Examples of administration objects are Cell Directory
		Service (CDS) directories, access control lists (ACLs),



 Hewlett-Packard Company	    - 3 -	      OSF DCE 1.1/HP DCE 1.8






 dcecp(1m)		  Open Software Foundation		   dcecp(1m)




		Distributed Time Service (DTS) servers, server control
		objects, and so on. Each administration object is briefly
		described below.

      operation Specifies the name of an action, such as create, show, or
		remove, that is to be performed on an administration object.
		For complete descriptions of operations supported by each
		dcecp object, refer to individual object reference pages.
		Common operations are briefly described below.

      argument	Specifies the name of one or more specific objects to
		operate on. Most, but not all, dcecp objects take an
		argument.  Refer to the individual reference pages for
		descriptions of the arguments supported by various objects.

      -option	Specifies a qualifier that controls the precise behavior of
		a dcecp command.  Most, but not all, dcecp commands take
		options.  Specify options by preceding the option name with
		a dash, as in -replica.	 Some options take an argument,
		opt_arg, that can be a name or a value. The following
		command shows a -clearinghouse option and its argument,
		which is the name of a CDS clearinghouse:


		directory create /.:/admin -clearinghouse /.:/boston_ch


      The DCE control program supports the following dcecp administration
      objects.	For complete descriptions of the administration objects,
      refer to the individual object reference pages.


      account	Manages an account in the DCE Security Service registry.

      acl	Manages DCE ACLs.

      attrlist	Manipulates attribute lists in scripts.

      aud	Manages the audit daemon on any DCE host.

      audevents Displays the audit event classes on any DCE host.

      audfilter Manages audit event filters on any DCE host.

      audtrail	Displays audit trail files on the local host.

      cds	Manages the CDS server daemon on any DCE host.

      cdsalias	Manages cell names known to CDS.





 Hewlett-Packard Company	    - 4 -	      OSF DCE 1.1/HP DCE 1.8






 dcecp(1m)		  Open Software Foundation		   dcecp(1m)




      cdscache	Manages the CDS clerk cache on any DCE host.

      cdsclient Manages the CDS client daemon on any DCE host.

      cell	Performs cellwide tasks.

      cellalias Performs cell aliasing and connection tasks.

      clearinghouse
		Manages CDS clearinghouses on the local host.

      clock	Manages the clock on any DCE host.

      directory Manages directory entries in the CDS namespace.

      dts	Manages DTS on any host.

      endpoint	Displays remote endpoints, manages local endpoints.

      group	Manages DCE groups in the security service.

      host	Performs tasks involving a host in a DCE cell.

      hostdata	Manages host-specific information on any DCE host.

      hostvar	Manages host-specific variables on the local DCE host.

      keytab	Manages server key tables on any DCE host.

      link	Manages softlinks in CDS.

      log	Manages routing for DCE serviceability messages.

      name	Manages CDS name translation.

      object	Manages object entries in CDS.

      organization
		Manages DCE organizations in the Security Service.

      principal Manages DCE principals in the Security Service.

      registry	Manages DCE security replicas and registry wide information.

      rpcentry	Manages a server entry in CDS.

      rpcgroup	Manages a group entry in CDS.

      rpcprofile
		Manages a profile entry in CDS.




 Hewlett-Packard Company	    - 5 -	      OSF DCE 1.1/HP DCE 1.8






 dcecp(1m)		  Open Software Foundation		   dcecp(1m)




      secval	Manages the security validation service on any DCE host.

      server	Manages DCE servers on any DCE host.

      user	Performs tasks involving individual user information.

      utc	Manipulates Universal Time Coordinated (UTC) timestamps.

      uuid	Manipulates (generates or compares) Universal Unique
		Identifiers (UUIDs).

      xattrschema
		Manages schemas for extended registry attributes (ERAs).


    Common Operations
      This section describes operations common to more than one object.
      Some operations presented here are implemented in all objects, some in
      only a few, and some only for specific types of objects such as
      containers (for instance, CDS directories).


      add	Adds an object to a container.	It is implemented for all
		objects that represent containers. The argument is a list of
		names of containers.  The required -member option is used to
		specify the name of the member to be added to the
		containers.  Its value is a list of members to be added.  If
		lists are specified for both the -member option and as the
		argument, then each member name is added to each container.
		For example, it is used to add a member to a remote
		procedure call (RPC) group and is used to add an element to
		an RPC profile.	 This operation returns an empty string on
		success.

      catalog	Returns the names of all instances of an object.  It usually
		takes no argument.  In some cases, though, an argument
		specifying a scope, such as a cell name, is optional. For
		example, the principal catalog command returns a list of all
		principals in the registry.  By default, full names are
		returned.  Some objects support a -simplename option, which
		returns names in a shorter form (either relative or not
		fully qualified).  The order of the returned list depends on
		the object.

      create	Creates a new instance of an object.  It takes one argument,
		a list of names of instances to be created.  This operation
		returns an empty string on success. Returns an error if the
		object already exists.	For some objects this command takes
		a -attribute option or a set of attribute options to specify
		attributes on the new object.




 Hewlett-Packard Company	    - 6 -	      OSF DCE 1.1/HP DCE 1.8






 dcecp(1m)		  Open Software Foundation		   dcecp(1m)




      delete	Destroys an instance of the object.  It takes one argument,
		a list of names of instances to be deleted.  This operation
		returns an empty string on success. If the object does not
		exist, an error is returned.

      help	Returns help information on the object as described in the
		Help section.  It takes an argument, which may be an
		operation supported by the object or the -verbose option to
		return more information.

      list	Returns a list of the names of all the members of a
		container.  This operation returns names only and not any
		other information about the members.  It is implemented on
		all objects that represent containers.	The argument is a
		list of names of containers for which to return members.
		The order of the returned list depends on the object.  If
		more than one container name is given, all member names are
		returned in one list.

      modify	This operation is used to modify attributes, policies,
		counters, or any other information in an object.  Therefore,
		all attributes, policies, counters, and so forth must have
		unique names.  This operation is not available to all
		objects. The argument is a list of names of objects to
		modify.

		The specific modification to be made to an object is
		described by one or more of the -add, -remove, or -change
		options.  If more than one is used, the entire modify
		operation is treated atomically in that either it all will
		work or none of it will.  The order of the options does not
		matter.	 Each option can be used only once per command
		invocation. This operation returns an empty string on
		success.


		-add	  Used to add an attribute to an object or merely to
			  add values to an existing attribute.	The value of
			  this option is an attribute list.

		-remove	  Used to remove an entire attribute or merely some
			  values from an attribute.  The value of this
			  option is an attribute list.

		-change	  Used to change one attribute value to another.
			  The value of this option is an attribute list.


      operations
		Returns a list of the operations supported by the object.
		It takes no arguments, and always returns a Tcl list



 Hewlett-Packard Company	    - 7 -	      OSF DCE 1.1/HP DCE 1.8






 dcecp(1m)		  Open Software Foundation		   dcecp(1m)




		suitable for use in a foreach statement.  The operations in
		the list are in alphabetical order with the exception of
		help and operations, which are listed last.  To return the
		elements fully sorted, use the following command:

		lsort [object operations]


      remove	Removes an object from a container.  It is implemented for
		all objects that represent containers.	The argument is a
		list of names of containers.  The remove operation requires
		one option, -member, which is used to specify the name of
		the member to be removed from the container.  The value is a
		list of names of members of the containers.  If the value of
		this option and the argument to the command are both lists,
		then each listed member is removed from each specified
		container.  If the members do not exist an error is
		returned.  This operation returns an empty string on
		success.

      rename	This operation changes the name of a specified object.	The
		argument is a single name of an object to be renamed, that
		is, it cannot be a list.  Takes a required -to option with a
		value of the new name.	The value may not be a list.  This
		operation returns an empty string on success.

      show	Returns information about an object instance.  Objects can
		have various types of information such as attributes,
		counters, policies, and so on.	The show operation is used
		to return any of this information.  Options are passed to
		the command to specify what information is to be returned.
		Most of the options used for this purpose are in the plural
		form such as -all, -attributes, -counters, and -members.

		Unlike the list operation, which returns information about
		the members of a container, the show operation looks only at
		the named object instance.  If the object is a container,
		the show operation does not return information about the
		members, only the container itself.

		This operation takes one argument which is a list of names
		of instances to be shown.

      synchronize
		Tells the instance to synchronize with any replicas of
		itself.	 In CDS terminology, this operations performs a
		skulk on a directory; in DTS, it causes a server to
		synchronize.  This operation is implemented for all objects
		that support replication. The argument is a list of instance
		names to synchronize.  If more than one instance name is
		given, each instance synchronizes with all of its replicas.



 Hewlett-Packard Company	    - 8 -	      OSF DCE 1.1/HP DCE 1.8






 dcecp(1m)		  Open Software Foundation		   dcecp(1m)




		Pairwise synchronization is not supported. This operation
		returns an empty string on success.


    Miscellaneous Commands
      The DCE control program includes a set of commands for miscellaneous
      operations.


      dcecp_initInterp
		Initializes a base Tcl interpreter with all the dcecp
		commands.

      echo	Displays the supplied string as output.

      errtext	Takes a DCE status code as an argument and returns the text
		of the associated message as found in the message catalogs.
		The argument can be in decimal, octal (leading 0), or
		hexadecimal (leading 0x) notation.

      login	Creates a new login context, which persists until the end of
		the dcecp session or until destroyed by logout. The login
		comand also sets the _c convenience variable to the name of
		the cell logged in to and the _u convenience variable to the
		name of the principal that issued the login command.
		Convenience variables are discussed in a separate section of
		this reference page.  Login contexts are stacked.  Takes an
		account name as an argument.  The password is prompted for
		and not echoed to the screen.  Also takes the -password
		option to enter a password.

      logout	Logs you out of the current login context as established
		with a previous login command. You can only log out of
		contexts that were created with the dcecp login. Trying to
		log out of an inherited context results in an error.
		Leaving dcecp logs out all contexts created in the session.

      quit	Exits from dcecp.  A synonym of the Tcl built-in command
		exit.

      resolve	Takes a partial string binding and returns a fully bound
		string binding. Takes a required -interface option and an
		optional -object option with an interface identifier as an
		argument to provide enough information for the mapping to
		occur.

      shell	Spawns a command shell for the user.  The value of the SHELL
		environment variable is used to obtain the name of the shell
		to spawn. When the command shell terminates, control is
		returned to dcecp. If the shell is called with arguments,
		they are passed to the shell and executed. Control is



 Hewlett-Packard Company	    - 9 -	      OSF DCE 1.1/HP DCE 1.8






 dcecp(1m)		  Open Software Foundation		   dcecp(1m)




		returned upon completion.  Always returns an empty string,
		though an error exception is generated if the shell exits
		abnormally.


    Command Processing
      The DCE control program supports the Tcl built-in commands as well as
      its own commands.	 If a command name is unknown to dcecp, it is passed
      to the unknown function and dcecp evaluates it using the following
      algorithm:


	+  If the command is found in a dcecp script file, dcecp executes
	   the command.

	+  If the command exists as an executable UNIX program, dcecp
	   executes the command.  Therefore, you can invoke any UNIX command
	   from the dcecp prompt (for example, ls -l).	Because you do not
	   leave dcecp, you don not lose any context you have established.

	+  If you have invoked the command at the top level of the dcecp
	   shell and the command requests C-shell-like history substitution
	   (such as !!, !number or ^old^new), dcecp emulates the C shell's
	   history substitution.

	+  If you have invoked the command at the top level of the dcecp
	   shell and the command is a unique abbreviation for another
	   command, dcecp invokes the command.


    Abbreviations
      The dcecp command makes use of two mechanisms to allow all object
      names, operation names, and options to be abbreviated to the shortest
      unique string in interactive commands.

      The first mechanism relies on the unknown command whose behavior is
      described in the Command Processing section of this reference page.

      The second mechanism is built in to the individual dcecp commands
      themselves.  This mechanism allows the operation name to be
      abbreviated to the shortest unique operation string supported by the
      object, and the option names to be abbreviated to the shortest unique
      string representing an option supported by an object and operation.

      For example, consider the following directory create command:

      directory create /.:/admin/printers/ascii -replica -clearinghouse /.:/SFO_ch


      In the abbreviated form, the same command can be entered as follows:




 Hewlett-Packard Company	   - 10 -	      OSF DCE 1.1/HP DCE 1.8






 dcecp(1m)		  Open Software Foundation		   dcecp(1m)




      dir cre /.:/admin/printers/ascii -r -c /.:/SFO_ch


      Although abbreviating commands and options is a good way to save
      keystrokes when typing interactive commands, abbreviations are not
      recommended for use in scripts.  New procedures in scripts can cause
      abbreviations to become ambiguous.  Furthermore, abbreviations are not
      always portable.	When scripts move to other machines, some
      definitions may be left behind so scripts may not work correctly.
      Always spell out complete names in scripts.

    Syntax
      The dcecp commands have a default word order, which is object
      operation.  This order facilitates adding new objects because new
      objects can simply be added along with their operations.

      You can configure dcecp to accept commands ordered as operation object
      by loading a script called verb-object.dcecp.  Users who have access
      to the operation object order continue to have access to the object
      operation order.	You can load the script for all users on a host by
      including the following line in the system's init.dcecp file:

      source verb-object.dcecp


      You can configure operation object for individual users by including
      the line in that user's .dcecprc file.

    Attribute Lists
      Many commands need to specify attributes to operate upon.	 For
      example, the modify operation allows attributes to be changed and the
      create operation often allows attributes to be created along with the
      object.  In all cases, you can use an attribute list to specify the
      attributes and their values.  Doing so makes passing information from
      one command to another very easy.	 For example, an ACL copy operation
      could be written as follows:

      # copy acl name1 to acl name2
      # no error checking
      proc acl_copy {name1 name2} {
	acl replace $name2 -acl [acl show $name1]
      }


    Attribute Options
      While attribute lists are useful for writing scripts, they are often
      not user friendly.  For those objects that have a fixed list of
      attributes (for instance, principal and dts, but not object), wherever
      an attribute list is allowed, options for each attribute that have the
      same name as the attribute are allowed followed by their values.	For
      example, the following are equivalent:



 Hewlett-Packard Company	   - 11 -	      OSF DCE 1.1/HP DCE 1.8






 dcecp(1m)		  Open Software Foundation		   dcecp(1m)




      principal create smith -attribute {{quota 5} {uid 123}}

      principal create melman -quota 5 -uid 123


    Lists of Lists
      The DCE control program interpreter relies on list structures to parse
      command input and return command output. For instance, the following
      sample command removes the user ACL entry for the principal melman
      from an object called /.:/foo.

      acl modify /.:/foo -remove {user melman}

      Because the -remove option uses a list structure to group attributes
      and values in the option argument, it can take a list of ACL entries
      as in the following example, which removes the user ACL entry for the
      principals melman and salamone:

      acl modify /.:/foo -remove {{user melman} {user salamone}}


      Lists of one value that do not contain spaces do not require braces.
      The string syntax of an ACL entry allows the type and key to be
      separated by a : (colon), so the following are valid:

      acl modify /.:/foo -remove user:melman

      acl modify /.:/foo -remove {user:melman user:salamone}


      If only one ACL entry given, that is, the -remove option's value has
      only one element (and that element does not contain spaces), then
      braces are not needed to delimit the list. The following are all
      valid, but all are examples with unnecessary braces:

      acl modify /.:/foo -remove {{user melman}}

      acl modify /.:/foo -remove {{{user melman}}}

      acl modify /.:/foo -remove {user:melman}

      acl modify /.:/foo -remove {{user:melman} {user:salamone}}


    Convenience Variables
      All dcecp commands set several variables on execution.  The variables
      contain the name of the object operated on, the return value of the
      last command, the cell name of the last object operated on, and so on.
      To avoid unnecessary typing, you can substitute the value of these
      variables into the next command.




 Hewlett-Packard Company	   - 12 -	      OSF DCE 1.1/HP DCE 1.8






 dcecp(1m)		  Open Software Foundation		   dcecp(1m)




      Convenience variables behave just like other variables in dcecp. Thus,
      you can trigger variable substitution by prepending a $ (dollar sign)
      before the name of the variable.	Alternatively, you can trigger
      substitution by using set.  The convenience variables can be set only
      by using dcecp.

      The following variables are defined by dcecp:


      _b	Holds the name of the server bound to by the last command.
		This variable is actually a Tcl array where the indexes are
		used to identify the service.  Currently there is only one
		index is defined: sec.	Refer to the variable as _b(sec).

		The value specifies the name of a server in whatever manner
		the service finds useful.  This value could be the name of
		an RPC server entry in the namespace, a string binding, or
		the name of a cell.  This variable cannot be set by the
		user.

      _c	Holds the cell name of the current principal.  The login
		command sets the cell name (_c) and principal name (_u)
		convenience variables at login (see the login command). This
		variable cannot be set by the user.

      _conf	This variable alters the behavior of most commands that
		operate on a CDS object. It indicates the confidence you
		have in the local CDS daemon to fulfill requests.  The legal
		values are low, medium, and high.  The default is medium.

      _e	Holds the last DCE error code encountered.  This variable
		has meaning only if dcecp is able to determine what the
		error code is.	The value -l (negative one) is used when an
		actual error code is unavailable.  This variable cannot be
		set by the user.

      _h	Holds the hostname the current user is operating on.  This
		variable cannot be set by the user.

      _local	Holds a flag that indicates the mode in which the dcecp
		session is operating.  This variable is set to true if the
		dcecp session was started with the -local option.  This
		variable cannot be set by the user.

      _n	Holds a list of the names entered in the last command.
		These names are the names that the command operated on,
		typically entered as the third argument.  This variable
		cannot be set by the user.

		For example, the following command lists the simplenames of
		the entries in the /.: directory:



 Hewlett-Packard Company	   - 13 -	      OSF DCE 1.1/HP DCE 1.8






 dcecp(1m)		  Open Software Foundation		   dcecp(1m)




		dcecp>&gt&gt> directory list /.: -simplename
		hosts subsys absolut_ch cell-profile fs lan-profile sec sec-v1
		dcecp>&gt&gt>


		The _n variable then contains the following name:

		dcecp>&gt&gt> echo $_n
		/.:
		dcecp>&gt&gt>


		The following command creates the /.:/x and /.:/y
		directories:

		dcecp>&gt&gt> directory create {/.:/x /.:/y}
		dcecp>&gt&gt>


		The _n variable then contains the following names:

		dcecp>&gt&gt> echo $_n
		/.:/x /.:/y
		dcecp>&gt&gt>


      _o	Holds the object used in the last operation.  For example,
		if the last command was dir show /.:, then _o is directory.
		This variable cannot be set by the user.

      _p	Holds the parent of the object named in the _n variable. If
		the _n variable is a list, the _p variable is a list of the
		same length, where each element is the parent of the
		corresponding element in _n.  If an object in _n has no
		parent, the value of _p is the empty string. This variable
		cannot be set by the user.

		The following example creates the directories named
		/.:/gumby and /.:/pokey. When the command completes, the _n
		variable contains the names gumby and pokey.  The _p
		variable contains the names of the parents of /.:/gumby and
		/.:/pokey:

		dcecp>&gt&gt> directory create {/.:/gumby /.:/pokey}
		dcecp>&gt&gt>

		dcecp>&gt&gt> echo $_n
		/.:/gumby /.:/pokey
		dcecp>&gt&gt>

		dcecp>&gt&gt> echo $_p



 Hewlett-Packard Company	   - 14 -	      OSF DCE 1.1/HP DCE 1.8






 dcecp(1m)		  Open Software Foundation		   dcecp(1m)




		/.: /.:
		dcecp>&gt&gt>


      _r	Holds the return value of the last executed command. This
		variable cannot be set by the user.

      _s	Holds the name of the server to bind to by the next command.
		This variable is actually a Tcl array where the indexes are
		used to identify the service.  The currently defined indexes
		are sec, cds, dts, and aud.

		The value specifies the name of a server in whatever manner
		the user finds useful.	This value could be the name of an
		RPC server entry in the namespace, a string binding, or the
		name of a cell.	 Users can set this variable by issuing the
		set command to select the server to use.

		Each service treats the values of this variable (array)
		differently.  For example, the Security Service uses this
		variable to select the registry to bind to for the next
		command, and as a default for the next registry operation.
		If bound to a read-only replica and an update is requested,
		dcecp tries to bind to the master registry to perform the
		change.	 CDS attempts to communicate only with the CDS
		server named by the variable.  If the named CDS server
		cannot satisfy a request for any reason, the request fails.
		The auditing service and DTS uses its variable in a manner
		similar to the CDS server.  To contact an audit daemon or
		DTS server on another host, set this variable to identify
		that server.

		For information about an object's use of this variable, see
		the object's reference page or use the object's help
		-verbose operation.

      _u	Holds the current principal name.  The login command sets
		the cell name (_c) and principal name (_u) convenience
		variables at login (see the login command). This variable
		cannot be set by the user.


    Error Handling
      All dcecp operations return either a list of some information or an
      empty string on success.	If an error occurs, dcecp returns an error
      message.	The DCE control program also provides a catch command to
      help scripts catch errors and invoke error handlers.

      The DCE control program provides two global variables that store error
      information returned from commands.  The errorInfo variable contains
      the stack-trace of the error messages.  When errors occur, dcecp



 Hewlett-Packard Company	   - 15 -	      OSF DCE 1.1/HP DCE 1.8






 dcecp(1m)		  Open Software Foundation		   dcecp(1m)




      commands return one line error messages by default.  If the variable
      dcecp_verbose_errors is set to 1, then a stack trace as it would
      appear in errorInfo is output as well.

      When a dcecp command argument is a list of objects, the command
      operates on multiple objects.  These operations are usually performed
      iteratively.  If an error occurs, the command ceases at the time of
      error, producing an exception.  Some operations will have finished and
      others will not have.  These operations are always performed in the
      order listed, and the error message should make it clear on which
      object the command failed.

    Help
      The DCE control program provides several kinds of help.  All returned
      help strings are obtained from appropriate message catalogs.

      To see which operations an object supports, use the operations
      command.	An example follows:

      dcecp>&gt&gt> principal operations
      catalog create delete modify rename show help operations
      dcecp>&gt&gt>


      This command provides simple help similar to usage messages found on
      many systems.  Users unsure of an operation name or of whether an
      operation is supported by an object can use this command to find the
      answer.  The output is a dcecp list that can be used by other dcecp
      commands.

      To see other information about an object, use an object's help
      operation.  All dcecp objects have a help operation that offers three
      kinds of information.


	+  View brief information about an object's operations by using help
	   without arguments or options.  Operations are listed in
	   alphabetical order with the operations and help operations listed
	   last. For example:

	   dcecp>&gt&gt> principal help
	   catalog	       Returns all the names of principals in the registry.
	   create	       Creates a DCE principal.
	   delete	       Deletes a principal from the registry.
	   modify	       Changes the information about a principal.
	   rename	       Renames the specified principal.
	   show		       Returns the attributes of a principal.
	   help		       Prints a summary of command-line options.
	   operations	       Returns a list of the valid operations for this command.
	   dcecp>&gt&gt>




 Hewlett-Packard Company	   - 16 -	      OSF DCE 1.1/HP DCE 1.8






 dcecp(1m)		  Open Software Foundation		   dcecp(1m)




	+  View brief information about the options an operation supports by
	   using help with the name of the operation as the argument.  This
	   operation returns attribute options in alphabetical order.  If no
	   options are supported, an empty string is returned.	For example:

	   dcecp>&gt&gt> principal help create
	   -alias	       Indicates the principal name is an alias of the uid.
	   -attribute	       Specify principal attributes in an attribute list format.
	   -fullname	       Fullname of the principal.
	   -quota	       How many registry objects can the principal create.
	   -uid		       User Identifier of the new principal.
	   -uuid	       Orphaned UUID to be adopted by the principal.
	   dcecp>&gt&gt>



	+  View a short description of a dcecp object by using the help
	   operation with the -verbose option.	This operation returns text
	   explaining what the object represents and how to use it.  For
	   example:

	   dcecp>&gt&gt> principal help -verbose
	   This object allows manipulation of principal information stored
	   in the DCE registry.	 The argument is a list of either relative or
	   fully-qualified principal names.  Specify fixed attributes using
	   attribute options or an attribute list.  Specify any extended attributes
	   using an attribute list.  Principal operations connect to a registry that
	   can service the request.  Specify a particular registry by setting the
	   _s(sec) convenience variable to be a cell-relative or global replica
	   name, or the binding of the host where the replica exists.  The
	   completed operation sets the _b(sec) convenience variable to the name
	   of the registry contacted.
	   dcecp>&gt&gt>


    Utility Library
      The file opt/dcelocal/dcecp/utility.dcp contains Tcl functions useful
      for DCE administration.  The functions, which can vary from release to
      release, are fully commented to document their use.

    Reference Pages
      To display a reference page for a dcecp administration object, use the
      man command and preface the object name with dcecp_. For example, to
      display the registry reference page enter:

      man dcecp_registry

      Users with [POSIX.2] systems can view dcecp administration object
      reference pages without exiting dcecp.  For example:

      dcecp>&gt&gt> man dcecp_registry



 Hewlett-Packard Company	   - 17 -	      OSF DCE 1.1/HP DCE 1.8






 dcecp(1m)		  Open Software Foundation		   dcecp(1m)




    Command-Line Editing
      You can edit a line before it is sent to dcecp by typing certain
      control characters and escape sequences.	To enter a control
      character, hold down the <&lt&lt&lt;Control>&gt&gt&gt; key and press the appropriate
      character key. (Control characters are indicated in DCE documentation
      by the notation <&lt&lt&lt;Ctrl-x>&gt&gt&gt;, where x is the second key.)  To enter an
      escape sequence, press <&lt&lt&lt;Escape>&gt&gt&gt; then press one or more character keys.
      (Escape sequences are indicated in DCE documentation by the notation
      <&lt&lt&lt;ESC x>&gt&gt&gt;, where x is the second key.) Escape sequences are case-
      sensitive; control characters are not.

      You can enter an editing command anywhere on a line.  In addition, you
      can enter <&lt&lt&lt;Return>&gt&gt&gt; anywhere on the line.

      You can specify a number [n] as a repeat count.  To enter a repeat
      count, press <&lt&lt&lt;Escape>&gt&gt&gt;, a number, and the command you want to execute.

      For example, <&lt&lt&lt;ESC 4>&gt&gt&gt;<&lt&lt&lt;Ctrl-d>&gt&gt&gt; deletes the next four characters on a
      line.

      Use the following control characters and escape sequences for line
      editing:

      Control Sequence
		     Action Performed

      <&lt&lt&lt;Ctrl-A>&gt&gt&gt;	     Move to the beginning of the line

      <&lt&lt&lt;Ctrl-B>&gt&gt&gt;	     Move left (backward) [n]

      <&lt&lt&lt;Ctrl-D>&gt&gt&gt;	     Delete the next character [n]

      <&lt&lt&lt;Ctrl-E>&gt&gt&gt;	     Move to the end of the line

      <&lt&lt&lt;Ctrl-F>&gt&gt&gt;	     Move right (forward) [n]

      <&lt&lt&lt;Ctrl-G>&gt&gt&gt;	     Ring the bell

      <&lt&lt&lt;Ctrl-H>&gt&gt&gt;	     Delete the character before the cursor [n]

      <&lt&lt&lt;Ctrl-I>&gt&gt&gt;	     Complete the filename (<&lt&lt&lt;Tab>&gt&gt&gt;)

      <&lt&lt&lt;Ctrl-J>&gt&gt&gt;	     Done with the line (<&lt&lt&lt;Return>&gt&gt&gt;)

      <&lt&lt&lt;Ctrl-K>&gt&gt&gt;	     Kill to the end of the line (or column [n])

      <&lt&lt&lt;Ctrl-L>&gt&gt&gt;	     Redisplay the line

      <&lt&lt&lt;Ctrl-M>&gt&gt&gt;	     Done with the line (alternate <&lt&lt&lt;Return>&gt&gt&gt;)





 Hewlett-Packard Company	   - 18 -	      OSF DCE 1.1/HP DCE 1.8






 dcecp(1m)		  Open Software Foundation		   dcecp(1m)




      <&lt&lt&lt;Ctrl-N>&gt&gt&gt;	     Get the next line from history [n]

      <&lt&lt&lt;Ctrl-P>&gt&gt&gt;	     Get the previous line from history [n]

      <&lt&lt&lt;Ctrl-R>&gt&gt&gt;	     Search backward (or forward if [n]) through history for
		     the text; start the line if the text begins with an up
		     arrow

      <&lt&lt&lt;Ctrl-T>&gt&gt&gt;	     Transpose the characters

      <&lt&lt&lt;Ctrl-V>&gt&gt&gt;	     Insert the next character even if it is an edit command

      <&lt&lt&lt;Ctrl-W>&gt&gt&gt;	     Wipe to the mark

      <&lt&lt&lt;Ctrl-X>&gt&gt&gt;<&lt&lt&lt;Ctrl-X>&gt&gt&gt;
		     Exchange the current location and mark

      <&lt&lt&lt;Ctrl-Y>&gt&gt&gt;	     Yank back the last killed test

      <&lt&lt&lt;Ctrl-[>&gt&gt&gt;	     Start an escape sequence (<&lt&lt&lt;Escape>&gt&gt&gt;)

      <&lt&lt&lt;Ctrl-]>&gt&gt&gt;	     Move forward to the next character c

      <&lt&lt&lt;Ctrl-?>&gt&gt&gt;	     Delete the character before the cursor [n]


      Escape Sequence
		     Action Performed

      <&lt&lt&lt;Escape>&gt&gt&gt;<&lt&lt&lt;Ctrl-H>&gt&gt&gt;
		     Delete the previous word (<&lt&lt&lt;Backspace>&gt&gt&gt;) [n]

      <&lt&lt&lt;Escape>&gt&gt&gt;<&lt&lt&lt;Delete>&gt&gt&gt;
		     Delete the previous word (<&lt&lt&lt;Delete>&gt&gt&gt;) [n]

      <&lt&lt&lt;Escape>&gt&gt&gt;<&lt&lt&lt;Space>&gt&gt&gt;
		     Set the mark (<&lt&lt&lt;Space>&gt&gt&gt;); refer to the <&lt&lt&lt;Ctrl-X>&gt&gt&gt;<&lt&lt&lt;Ctrl-X>&gt&gt&gt;
		     and <&lt&lt&lt;Ctrl-Y>&gt&gt&gt; control characters

      <&lt&lt&lt;ESC .>&gt&gt&gt;	     Get the last (or [n]th) word from the previous line

      <&lt&lt&lt;ESC ?>&gt&gt&gt;	     Show the possible completions

      <&lt&lt&lt;ESC <&lt&lt&lt;>&gt&gt&gt;	     Move to the start of history

      <&lt&lt&lt;ESC >&gt&gt&gt;>&gt&gt&gt;	     Move to the end of history

      <&lt&lt&lt;ESC b>&gt&gt&gt;	     Move backward one word [n]

      <&lt&lt&lt;ESC d>&gt&gt&gt;	     Delete the word under the cursor [n]




 Hewlett-Packard Company	   - 19 -	      OSF DCE 1.1/HP DCE 1.8






 dcecp(1m)		  Open Software Foundation		   dcecp(1m)




      <&lt&lt&lt;ESC f>&gt&gt&gt;	     Move forward one word [n]

      <&lt&lt&lt;ESC l>&gt&gt&gt;	     Make the word lowercase [n]

      <&lt&lt&lt;ESC u>&gt&gt&gt;	     Make the word uppercase [n]

      <&lt&lt&lt;ESC y>&gt&gt&gt;	     Yank back the last killed text

      <&lt&lt&lt;ESC w>&gt&gt&gt;	     Make area up to mark yankable

      <&lt&lt&lt;ESC nn>&gt&gt&gt;	     Set repeat count to the number nn


      The DCE control program also supports filename completion.  For
      example, suppose the root directory has the following files in it:
      vmunix, core, vmunix.old.

      If you type rm /v and then press <&lt&lt&lt;Tab>&gt&gt&gt;, dcecp finishes off as much of
      the name as possible by adding munix. If the name is not unique, the
      terminal alarm sounds.  If you enter <&lt&lt&lt;ESC ?>&gt&gt&gt;, dcecp displays the two
      possible complete filenames: vmunix and vmunix.old.  If you respond by
      entering a . (period) and by entering <&lt&lt&lt;Tab>&gt&gt&gt;, dcecp completes the
      filename for you.

    Command History and Command-Line Recall
      The DCE control program includes a history facility that stores
      previously entered commands.  View the stored commands using the
      history command.

      By default, the history facility stores the 20 most recent commands,
      but you can use a history keep command to change this as follows:

      dcecp>&gt&gt&gt; history keep 50
      dcecp>&gt&gt&gt;


      Each stored command is numbered so you can recall it by using a !
      (exclamation point) followed by the event number, as follows:

      dcecp>&gt&gt&gt; !7
      [execution of event 7
      dcecp>


      Recall a specific command using an ! (exclamation point) followed by
      the first unique characters of a previously entered command, as
      follows:

      dcecp>&gt&gt&gt; !dir
      [execution of last event beginning with dir
      dcecp>&gt&gt&gt;



 Hewlett-Packard Company	   - 20 -	      OSF DCE 1.1/HP DCE 1.8






 dcecp(1m)		  Open Software Foundation		   dcecp(1m)




      You can also recall and revise the most recent command using the
      ^old^new syntax familiar to UNIX users, as follows:

      dcecp> directory vreate /.:/admin/printers
      Error: Unrecognized argument 'vreate'.
      dcecp>&gt&gt&gt;
      dcecp>&gt&gt&gt; ^vreate^create
      dcecp>&gt&gt&gt;


 EXAMPLES
    Invocations
      The following examples show some ways to issue dcecp commands:


       1.  Invoke dcecp for interactive use:

	   % dcecp
	   cecp>&gt&gt&gt;


       2.  Invoke dcecp for a single command:

	   % dcecp -c clock show
	   1994-04-21-19:12:42.203+00:00I-----
	   %


       3.  Invoke dcecp and run a script:

	   % dcecp get_users.Tcl
	   %


    Simple Object Commands
      dcecp> acl show /.: -ic
      {unauthenticated r--t---}
      {group subsys/dce/cds-admin rwdtcia}
      {group subsys/dce/cds-server rwdtcia}
      {any_other r--t---}
      dcecp>

      % dcecp -c directory show /.:/subsys
      {RPC_ClassVersion {01 00}}
      {CDS_CTS 1995-10-11-14:06:47.884826100/08-00-09-85-b5-a6}
      {CDS_UTS 1995-10-23-03:06:43.209673100/08-00-09-85-b5-a6}
      {CDS_ObjectUUID 0c27c0ac-03d6-11cf-ad88-08000985b5a6}
      {CDS_Replicas
       {{CH_UUID 03ccab5c-03d6-11cf-ad88-08000985b5a6}
	{CH_Name /.../gumby1/blech_ch}
	{Replica_Type Master}



 Hewlett-Packard Company	   - 21 -	      OSF DCE 1.1/HP DCE 1.8






 dcecp(1m)		  Open Software Foundation		   dcecp(1m)




	{Tower {ncadg_ip_udp 15.22.50.213}}
	{Tower {ncacn_ip_tcp 15.22.50.213}}}}
      {CDS_AllUpTo 1995-10-23-13:06:43.560848100/08-00-09-85-b5-a6}
      {CDS_Convergence medium}
      {CDS_ParentPointer
       {{Parent_UUID 044a2a14-03d6-11cf-ad88-08000985b5a6}
	{Timeout
	  {expiration 1994-04-19-16:39:58.049}
	  {extension +1-00:00:00.000I0.000}}
	  {myname /.../brain_cell.osf.org/subsys}}
      {CDS_DirectoryVersion 3.0}
      {CDS_ReplicaState on}
      {CDS_ReplicaType Master}
      {CDS_LastSkulk 1995-10-23-13:06:43.560848100/08-00-09-85-b5-a6}
      {CDS_LastUpdate 1995-10-23-03:06:43.209673100/08-00-09-85-b5-a6}
      {CDS_Epoch 0c3512fc-03d6-11cf-ad88-08000985b5a6}
      {CDS_ReplicaVersion 3.0}
      %


    The foreach Loop
      dcecp> foreach i [group list temps] {
      > account modify $i -description "temps research" -expdate 1997-01-22-11}
      dcecp>


 RELATED INFORMATION
      Commands: cds_intro(1m), dce_intro(1m), dts_intro(1m), sec_intro(1m).


























 Hewlett-Packard Company	   - 22 -	      OSF DCE 1.1/HP DCE 1.8