CONTENTS Title Page Copyright Page Preface Part I Managing DECdns 1 Introduction to DECdns 1.1 How DECdns Works 1.2 Some Clients of DECdns 1.3 How People Use DECdns 1.4 What's in a Namespace? 1.4.1 Replicas and Their Contents 1.4.1.1 Object Entries 1.4.1.2 Soft Links 1.4.1.3 Child Pointers 1.4.2 Putting It All Together 1.5 How DECdns Protects Names 1.6 Management Interfaces 1.6.1 DECdns Control Program 1.6.2 Browser 1.7 Management Tasks 2 How DECdns Looks Up Names 2.1 Structure of a Name 2.2 Translating from Names to Resources 2.3 How DECdns Finds Names 2.4 Short Forms of DECdns Names 2.4.1 How Node Synonyms Work 2.4.2 Name Abbreviation Methods 2.4.3 Local Root 2.4.4 How Local Name Substitution Works 3 How DECdns Updates Data 3.1 Update Propagation 3.2 Skulk Operation 3.3 How Timestamps Help Keep Data Consistent 4 Using the DECdns Control Program 4.1 Elements of a DECdns Command 4.2 DECdns Entities 4.3 Attribute Groups 4.4 Prepositional Phrases 4.5 NCL Access Control Information for ULTRIX Systems 4.6 NCL Access Control Information for VMS Systems 4.7 Supplementary Commands 4.8 Wildcards 4.9 Editing the Commands 5 Managing DECdns Access Control 5.1 How DECdns Access Control Works 5.1.1 Specifying a DECdns Version 2 Principal 5.1.2 Specifying a DNS Version 1 Principal 5.1.3 Specifying Group Principals 5.1.4 DECdns Access Rights and Their Meanings 5.1.5 How DECdns Checks Access 5.2 Adding, Modifying, and Denying Access 5.2.1 Adding Access 5.2.2 Modifying Existing Access 5.2.3 Making Access Assignment Easier 5.2.3.1 Using Automatic Rights Propagation 5.2.3.2 Suppressing Automatic ACE Propagation 5.2.3.3 Creating Default ACEs 5.2.4 Using Null ACEs to Deny Access 5.3 Setting Up Access Control in a New Namespace 5.3.1 Adding Members to Your Namespace Administrator Group 5.3.2 Adding Access for Your Namespace Administrator Group 5.3.3 Implementing a General Access Control Policy 5.3.3.1 Full Access Policy 5.3.3.2 Read, Write, and Test Policy 5.3.3.3 Read and Test Policy 5.3.3.4 Explicit Access Policy 5.4 Displaying Access Rights 5.5 Removing Access 5.6 Managing Groups 5.6.1 Creating a Group 5.6.2 Adding Group Members 5.6.3 Modifying Group Membership 5.6.4 Removing Group Members 5.6.5 Removing Group Members from Multiple Groups 5.6.6 Deleting a Group 5.7 Modifying Principals and Removing Access for a Subtree 5.7.1 Modifying Principals 5.7.2 Removing Access from Multiple Names 6 Managing Clerks, Servers, and Clearinghouses 6.1 Monitoring Status 6.2 Monitoring Counters 6.3 Monitoring Clerk Communication with Specific Clearinghouses 6.4 Monitoring the Contents of a Clearinghouse 6.5 Modifying a Clerk's Timeout Interval 6.6 Deleting and Restarting Clerks and Servers 6.6.1 Deleting a Clerk 6.6.2 Deleting a Server 6.6.3 Restarting a Deleted Clerk or Server on an ULTRIX System 6.6.4 Restarting a Deleted Clerk or Server on a VMS System 6.7 Preserving a Clearinghouse Across a Server System Upgrade 6.8 Backing Up Namespace Information 6.8.1 Using Replication to Back Up Namespace Information 6.8.2 Using the Dump/Merge Facilities to Back Up Directories and Their Contents 6.8.3 Using Operating System Backups 7 Managing Directories 7.1 Creating a Directory 7.2 Creating a Replica 7.3 Deleting a Replica 7.4 Skulking a Directory 7.5 Adjusting a Directory's Convergence 8 Viewing the Structure and Contents of a Namespace 8.1 Using the Browser to View the Namespace 8.1.1 Starting the Browser 8.1.2 Expanding and Collapsing Directories 8.1.3 Namespace Display Formats 8.1.4 Using a Virtual Root 8.1.5 Filtering the Namespace Display 8.1.6 Navigating the Namespace 8.1.6.1 Outline Navigation Aids 8.1.6.2 Tree Navigation Aids 8.2 Using DECdns Commands to View the Namespace 8.2.1 Using Prepositional Phrases in show and directory Commands 8.2.2 Using the show Command 8.2.3 Using the directory Command 9 Restructuring a Namespace 9.1 Managing Soft Links 9.1.1 Creating a Soft Link 9.1.2 Changing a Soft Link's Destination Name 9.1.3 Changing a Soft Link's Expiration or Extension Time 9.2 Modifying a Directory's Replica Set 9.2.1 Changing the Replica Type of a Replica 9.2.2 Excluding a Replica from a Replica Set 9.3 Deleting Directories 9.3.1 Deleting a Bottom-Level Directory 9.3.2 Deleting a Subtree of Directories 9.4 Merging Directories 9.4.1 Overview of the Merge Procedure 9.4.2 Basic Merge and Append Operations 9.4.2.1 Performing a Basic Merge Operation 9.4.2.2 Performing a Basic Append Operation 9.4.3 Merging Directories with a Single Command 9.4.4 Handling Clearinghouse Object Entries 9.4.5 Using the Failures File 9.4.5.1 Handling Duplicate Names 9.4.5.2 Handling Unreachable Name Failures 9.4.6 Adjusting Access After a Merge 9.4.7 Handling Changed Node Object Entries 9.4.8 Merging Two Namespaces 9.5 Relocating a Clearinghouse 9.5.1 Dissociating a Clearinghouse from Its Host Server System 9.5.2 Copying the Clearinghouse Database Files to the Target Server System 9.5.3 Re-creating and Enabling the Clearinghouse on the Target Server 9.6 Deleting a Clearinghouse 10 Using the DECdns Configuration Program 10.1 Running the DECdns Configuration Program 10.2 Changing a Clerk's Default Namespace 10.3 Establishing Communications with an Off-LAN Server 10.4 Configuring a DECdns Server in an Existing Namespace 10.4.1 Before You Configure a Server 10.4.1.1 Verifying DECdns Server Software and License Requirements 10.4.1.2 Granting the Access Required for Clearinghouse Creation 10.4.2 Configuring the Server 10.4.3 Converting an Existing DNS Version 1 Clearinghouse to DECdns Version 2 Format 10.4.4 Clearinghouse Conversion Warnings and Informational Messages 10.5 Displaying Address Information for Your Local Node Part II DECdns Control Program Command Dictionary 11 DECdns Control Program Command Dictionary add clearinghouse access add directory access add group access add group member add link access add object add object access change subtree access change subtree group member clear dns server clearinghouse create child create directory create dns clerk create dns clerk known namespace create dns clerk manual nameserver create dns server create dns server clearinghouse create group create link create object create replica delete child delete directory delete dns clerk delete dns clerk known namespace delete dns clerk manual nameserver delete dns server delete dns server clearinghouse delete group delete link delete object delete replica delete subtree directory child directory clearinghouse directory directory directory group directory link directory object disable dns clerk disable dns server disable dns server clearinghouse dump dns clerk cache dump subtree enable dns clerk enable dns server enable dns server clearinghouse initialize dns server merge file merge subtree recreate directory recreate link recreate object remove clearinghouse access remove directory access remove group access remove group member remove link access remove object remove object access remove subtree access remove subtree group member replace link replace object replace subtree set directory set directory to new epoch set directory to skulk set dns clerk set dns clerk known namespace set group set link set object show child show clearinghouse show clearinghouse access show directory show directory access show dns clerk show dns clerk known namespace show dns clerk manual nameserver show dns clerk remote clearinghouse show dns server show dns server clearinghouse show group show group access show link show link access show object show object access show replica A DECdns Naming Guidelines A.1 Valid Characters and Syntax Rules A.2 General Naming Guidelines A.3 Guidelines for Naming Clearinghouses A.4 Guidelines for Naming Namespaces B Special Clearinghouse Rules C DECdns Error Messages D DECdns Events E DECdns Problem Solving E.1 Determining a Node Name from a Clearinghouse NSAP Address E.2 Solving Common Access Control Problems E.2.1 Viewing Namespace Information E.2.2 Creating a Clearinghouse E.2.3 Creating a Directory E.2.4 Deleting a Directory E.2.5 Creating a Replica E.2.6 Deleting a Replica E.2.7 Modifying a Directory's Replica Set E.2.8 Restoring Access E.3 Handling Clearinghouse Creation Failures E.3.1 Granting Required Access E.3.2 Allowing a Directory to Store Clearinghouse Object Entries E.3.3 Verifying Server Node Registration and Address Information E.3.4 Verifying Availability and Connectivity to Clearinghouses E.4 Restoring a Corrupted Clearinghouse E.5 Restoring a Deleted Child Pointer E.6 Restoring a Missing Clearinghouse Object Entry E.7 Handling Node Verification Failures E.8 Breaking Soft Link Loops and Group Loops E.9 Eliminating Ambiguous Namespace Nicknames E.9.1 Displaying Ambiguous Nicknames E.9.2 Eliminating an Ambiguous Nickname E.10 Handling Communication Errors E.10.1 Identifying Clearinghouses to Which Communication Failed E.10.2 Restricting a Communication Error to DECdns or DECnet Performance E.11 Handling Clerk and Server Software Errors F DECdns Version Interoperability DECdns Glossary