Administration

Group Information window (Principal Information window)

 

Principal Attributes

 

Each principal must be assigned attributes to control the usage and

 

rights of the account. This section describes the possible attributes and

 

the default settings.

 

Setting the Default Group Principal Attributes

 

Before you begin adding principals to the database, you should review

 

the attributes and properties assigned to the default group principal,

 

default@REALM, and establish a set of base attributes for it. This default

 

group principal acts as a template; all new principals inherit its

 

attributes when they are created.

 

Modifying the default group principal does not update the attributes of

NOTE

 

existing principals. Therefore, you should consider the assigned

 

attributes before you begin adding principals.

 

Default Principal Attributes

 

 

When a realm is created in the database, the default@REALM principal is

 

automatically created. There is one default principal in each realm. This

 

principal controls the settings for the default group.

 

To edit the default group, use either the Administrator or the

 

Command-Line-Administrator as discussed below:

 

• Using the Administrator, edit the default group by selecting any

 

principal from the realm and clicking Edit to open the Principal

 

Information window. Use the Edit-> Edit Default Group menu

 

to open the Group Information window.

 

• Using the Command-Line-Administrator, you must edit the

 

default@REALM principal directly.

 

Note, you cannot edit the key and salt type setting for the default

 

group. For more information on using

 

Command-Line-Administrator, see the kadmin manpage or refer to

 

“Manual Administration Using kadmin” on page 170.

158

Chapter 6