Previous section.

DCE 1.1: Authentication and Security Services
Copyright © 1997 The Open Group

NAME

sec_rgy_pgo_add_member-Adds a person to a group or organization

SYNOPSIS

#include <dce/pgo.h>

void sec_rgy_pgo_add_member(
    sec_rgy_handle_t context,
    sec_rgy_domain_t name_domain,
    sec_rgy_name_t go_name,
    sec_rgy_name_t person_name,
    error_status_t *status);

PARAMETERS

Input

context

An opaque handle bound to a registry server. Use sec_rgy_site_open() to acquire a bound handle.

name_domain

This variable identifies the type of the person, group, or organization (PGO) item identified by the given name. The valid values are as follows:

sec_rgy_domain_group

The go_name parameter identifies a group.

sec_rgy_domain_org

The go_name parameter identifies an organization.

go_name

A character string (type sec_rgy_name_t) containing the name of the group or organization to which the specified person will be added.

person_name

A character string (type sec_rgy_name_t) containing the name of the person to be added to the membership list of the group or organization specified by go_name.

Output

status

A pointer to the completion status. On successful completion, the routine returns error_status_ok. Otherwise, it returns an error.

DESCRIPTION

The sec_rgy_pgo_add_member() routine adds a member to the membership list of a group or organization in the registry database.


Permissions Required

The sec_rgy_pgo_add_member() routine requires the M (Member_list) permission on the group or organization item specified by go_name. If go_name specifies a group, the routine also requires the g (groups) permission on the principal person_name.

NOTES

An account can be added to the registry database only when all its constituent PGO items are already in the database, and the appropriate membership relationships between them are established. For example, to establish an account with person name tom, group name writers, and organization name hp, all three names must exist as independent PGO items in the database. Furthermore, tom must be a member of writers, which must be a member of hp (See the sec_rgy_acct_add() routine to add an account to the registry.)

FILES

/usr/include/dce/pgo.idl

The idl file from which dce/pgo.h was derived.

ERRORS

error_status_ok

The call was successful.

sec_rgy_bad_domain

An invalid domain was specified. A member can be added only to a group or organization, not a person.

sec_rgy_not_authorized

The client program is not authorized to add members to the specified group or organization.

sec_rgy_object_not_found

The registry server could not find the specified name.

sec_rgy_server_unavailable

The DCE Registry Server is unavailable.

SEE ALSO

Functions: sec_rgy_pgo_add(), sec_rgy_pgo_delete_member(), sec_rgy_pgo_get_members(), sec_rgy_pgo_is_member().
Please note that the html version of this specification may contain formatting aberrations. The definitive version is available as an electronic publication on CD-ROM from The Open Group.

Contents Next section Index