Displaying and Setting Standard and Authentication Policies

· For the registry as a whole, use the dcecp registry show command with the -policies option.

· For an individual organization or account, use the dcecp organization show command with the -policies option (for standard policies) or the dcecp account show command with the -policies option (for authentication policies).

To set policy:

· For the registry as a whole, use the dcecp registry modify command. The following sample command uses the pwdlife option to set the password lifespan policy for the registry as a whole to 180 days:

dcecp> registry modify -pwdlife 180
dcecp>

· For an individual organization or account, use the dcecp organization modify command for standard policies or the dcecp account modify command for authentication policies. The following sample command uses the -pwdlife attribute option to set the password lifespan policy for the organization classic to unlimited:

dcecp> organization modify classic -pwdlife unlimited
dcecp>

Note that the previous examples all use attribute options. You can also set policy by using the dcecp registry modify, dcecp account modify, and dcecp organization modify commands with the -change option and attribute lists. For example, to use an attribute list to set the password lifespan policy for the organization classic to unlimited, the command would be as follows:

dcecp> organization modify classic -change {pwdlife unlimited}
dcecp>