NAME

sec_rgy_plcy_set_info-Sets the policy for an organization

SYNOPSIS

#include <dce/policy.h>

void sec_rgy_plcy_set_info(
    sec_rgy_handle_t context,
    sec_rgy_name_t organization,
    sec_rgy_plcy_t *policy_data,
    error_status_t *status);

PARAMETERS

Input

context

An opaque handle bound to a registry server. Use sec_rgy_site_open() to acquire a bound handle.

organization

A character string (type sec_rgy_name_t) containing the name of the organization for which the policy data is to be returned. If this string is empty, the routine sets the registry's policy data.

policy_data

A pointer to the sec_rgy_plcy_t structure containing the authentication policy. This structure contains the minimum length of a user's password, the lifetime of a password, the expiration date of a password, the lifetime of the entire account, and some flags describing limitations on the password spelling.

Output

status

A pointer to the completion status. On successful completion, the routine returns error_status_ok. Otherwise, it returns an error.

DESCRIPTION

The sec_rgy_plcy_set_info() routine sets the authentication policy for a specified organization. If no organization is specified, the registry's policy data is set.

Policy data can be returned or set for individual organizations and for the registry as a whole.

Permissions Required

The sec_rgy_plcy_set_info() routine requires the m (mgmt_info) permission on the policy object or organization for which the data is to be set.

NOTES

The policy set on an account may be less restrictive than the policy set for the registry as a whole. In this case, the changes in policy have no effect, since the effective policy is the most restrictive combination of the organization and registry authentication policies. (See the sec_rgy_auth_plcy_get_effective() routine.)

FILES

/usr/include/dce/policy.idl

The idl file from which dce/policy.h was derived.

ERRORS

error_status_ok

The call was successful.

sec_rgy_not_authorized

The user is not authorized to perform this operation.

sec_rgy_object_not_found

The registry server could not find the specified organization.

sec_rgy_server_unavailable

The DCE Registry Server is unavailable.

SEE ALSO

Functions: sec_rgy_plcy_get_effective(), sec_rgy_plcy_get_info().