Another set of parameters affecting all principals is the registry authentication policy. This set only controls the maximum lifetime of certificates of identity, upon first issue and renewal. Accounts also have authentication policies, and the policy in effect for any principal is the most restrictive combination of the registry policy and the policy for a principal's account. The associated routines are
· sec_rgy_auth_plcy_get_info( )
· sec_rgy_auth_plcy_get_effective( )
· sec_rgy_auth_plcy_set_info( )