PreviousNext

sec_rgy_plcy_get_info(3sec)

Returns the policy for an organization

Synopsis

#include <dce/policy.h>

void sec_rgy_plcy_get_info(

sec_rgy_handle_t context,
sec_rgy_name_t organization,
sec_rgy_plcy_t *policy_data,
error_status_t *status);

Parameters

Input

context
An opaque handle bound to a registry server. Use sec_rgy_site_open( ) to acquire a bound handle.

organization
A character string (type sec_rgy_name_t) containing the name of the organization for which the policy data is to be returned. If this string is empty, the routine returns the registry's policy data.

Output

policy_data
A pointer to the sec_rgy_plcy_t structure to receive the authentication policy. This structure contains the minimum length of a user's password, the lifetime of a password, the expiration date of a password, the lifetime of the entire account, and some flags describing limitations on the password spelling.

status
A pointer to the completion status. On successful completion, the routine returns error_status_ok. Otherwise, it returns an error.

Description
The sec_rgy_plcy_get_info( ) routine returns the policy data for the specified organization. If no organization is specified, the registry's policy data is returned.

The policy data consists of the following:

· The password expiration date. This is the date on which account passwords will expire.

· The minimum length allowed for account passwords.

· The period of time (life span) for which account passwords will be valid.

· The period of time (life span) for which accounts will be valid.

· Flags indicating whether account passwords can consist entirely of spaces or entirely of alphanumeric characters.

Permissions Required
The sec_rgy_plcy_get_info( ) routine requires the r (read) permission on the policy object or organization from which the data is to be returned.

Notes
The returned policy may not be in effect if the overriding registry authorization policy is more restrictive. (See the sec_rgy_auth_plcy_get_effective( ) routine.)

Files

/usr/include/dce/policy.idl
The idl file from which dce/policy.h was derived.

Errors

The following describes a partial list of errors that might be returned. Refer to the OSF DCE Problem Determination Guide for complete descriptions of all error messages.

sec_rgy_object_not_found
The registry server could not find the specified organization or the organization exists, but policy has not been set for the specified organization.

sec_rgy_server_unavailable
The DCE Registry Server is unavailable.

error_status_ok
The call was successful.

Related Information
Functions:

sec_intro(3sec)

sec_rgy_plcy_get_effective(3sec)

sec_rgy_plcy_set_info(3sec)