Commands for the Local Registry
To edit or view the local registry, invoke rgy_edit with the -l option while you are logged into the machine whose local registry you want to maintain. This topic lists the commands that are valid for editing or viewing the local registry. When you invoke rgy_edit with the -l option, only the subcommands and options listed here can be used.
v[iew]
Displays local registry entries.
del[ete] principal_name
Deletes the account and credential information for principal_name from the local registry.
pu[rge]
Purges expired local registry entries.
This command has no options or arguments.
The time limit, or lifespan, for which an entry in the local registry is valid is set as a property of the local registry with the properties subcommand. When the purge subcommand is run, it deletes all expired entries. The lifespan begins when an entry for the principal is added to the local registry (that is, the beginning of the lifespan is the last time the principal logged in to the local machine.) The lifespan ends after the time limit set as a local registry property.
pr[operties]
Changes and/or displays local registry properties and policies.
This command displays the current properties and then prompts for whether you want to make changes to them. You can change the local registrys:
Capacity - A number representing the total number of entries the local registry can contain at any one time. When the capacity is reached, subsequent new entries overwrite the oldest entries.
Account lifespan - The time in which an account in the local registry is valid in the following format:
weekswdaysdhourshminutesm
For example, 4 weeks and 5 days is entered as 4w5d.
If you enter only a number and no weeks, days, or hours designation, the designation defaults to hours. If you end the lifepan with an number and no weeks, days, or hours designation, the number with no designation defaults to seconds. For example, 12w30 is assumed to be 12 weeks, thirty seconds.
Related Information
Commands: sec_admin(8sec)