sec_rgy_pgo_add_member(3sec)
Adds a person to a group or organization
Synopsis
#include <dce/pgo.h>
void sec_rgy_pgo_add_member(
sec_rgy_handle_t context,
sec_rgy_domain_t
name_domain,
sec_rgy_name_t go_name,
sec_rgy_name_t person_name,
error_status_t
*status);
Parameters
Input
context
An opaque handle bound to a registry server. Use sec_rgy_site_open( ) to acquire a bound handle.
name_domain
This variable identifies the type of the person, group, or organization (PGO) item identified by the given name. The valid values are as follows:
sec_rgy_domain_group
The go_name parameter identifies a group.
sec_rgy_domain_org
The go_name parameter identifies an organization.
go_name
A character string (type sec_rgy_name_t) containing the name of the group or organization to which the specified person will be added.
principal_name
A character string (type sec_rgy_name_t) containing the name of the person to be added to the membership list of the group or organization specified by
go_name. You must use fully qualified names to add foreign principals as members of a group. (Only local principals can be added as members of an organization.)
Output
status
A pointer to the completion status. On successful completion, the routine returns error_status_ok. Otherwise, it returns an error.
Description
The sec_rgy_pgo_add_member( ) routine adds a member to the membership list of a group or organization in the registry database. For this call to succeed
when adding a principal from a foreign cell to a group, the Security Server (secd) must be running in the foreign cell.
Permissions Required
The sec_rgy_pgo_add_member( ) routine requires the M (Member_list) permission on the group or organization item specified by
go_name. If go_name specifies a group, the routine also requires the g (groups) permission on the principal person_name.
Notes
An account can be added to the registry database only when all its constituent PGO items are already in the database, and the appropriate membership relationships between
them are established. For example, to establish an account with person name tom, group name writers, and organization name hp, all three names must exist as independent
PGO items in the database. Furthermore, tom must be a member of writers, which must be a member of hp. (See the sec_rgy_acct_add( )
routine to add an account to the registry.)
Files
/usr/include/dce/pgo.idl
The idl file from which dce/pgo.h was derived.
Errors
The following describes a partial list of errors that might be returned. Refer to the OSF DCE Problem Determination Guide for complete descriptions of all error messages.
sec_rgy_not_authorized
The client program is not authorized to add members to the specified group or organization.
sec_rgy_bad_domain
An invalid domain was specified. A member can be added only to a group or organization, not a person.
sec_rgy_object_not_found
The registry server could not find the specified name.
sec_rgy_server_unavailable
The DCE Registry Server is unavailable.
error_status_ok
The call was successful.
Related Information
Functions:
sec_rgy_pgo_delete_member(3sec)