HP UX Kerberos Data Security Software manual List prinicpal. This is redundant with i or

Administration

		admin_acl_file
Table 6-1	Administrative Permission Settings (Continued)
	Administrator Field Name	ACL file
		Character
	List prinicpal. This is redundant with i or I	l or L
	Note: This permission is not displayed in
	Administrator
	Modify Principals	m or M
	Extract Keys	x or X
	Restricted Administrator. Use the r, R and Rr	r or R
	modifiers in combination with the a, A, c, C, d, D,
	i, I, m, M, or x. X permissions to permit
	administrative principals to use those options only
	against certain principals.
	The order of the permission letters is irrelevant.
NOTE

The principal can also include the “*” wildcard as the admin_acl_file supports the following identifier/instance wildcards:

•*/instance

•identifier/*

This makes it easier to add groups of principal names to the file. So if you want any principal with the instance “admin” to have permissions to administer the database, you could use the principal “*/admin@REALM”. where ‘REALM’ is your primary security server’s realm.

For example, to grant all principals with the admin instance, who need to have all the permissions assigned to them, add the following line in the acl file:

*/admin@FINANCE.BAMBI.COM *

where,

* all prinicpals

admin instance

Chapter 6 97