% Librarian I01-29ȧȧU8V 5}0ADD1DELETE2EXIT Z File_Info2,IMPORT MessagesOverview "Running_IMPORTSLSHOW`Gȧ 1 OverviewAThe DCE IMPORT utility allows you to create principal and accountCentries in a DCE registry based on accounts in an existing OpenVMS :authorization file. It is used for the following purposes:Ho To populate the DCE registry when a new DCE cell is first establishedHo To add entries to an existing DCE registry when a new OpenVMS system  joins an existing DCE cellJo To add entries to an existing DCE registry when new users have joined A an Open VMS sytem that is already part of an existing DCE cell CThe DCE IMPORT utility also creates and maintains an exclude list. DThe exclude list contains the OpenVMS usernames of users who do not Hhave, and do not require, a DCE account. This feature allows DCE IMPORT 6to skip over these users during DCE IMPORT operations. NOTE:K The DCE IMPORT utility described in this section cannot be satisfied by C the import function shipped with OSF DCE because of substantial ; differences between OpenVMS and UNIX user registry data.FPasswords cannot be imported. Instead, the automatic synchronization Cfeature that occurs during integrated login is used to import user passwords.ESee the Digital DCE for OpenVMS VAX and OpenVMS Alpha Reference Guide6for detailed descriptions of the DCE IMPORT commands. wwpnȧ 1 File_InfoEThe DCE DCE IMPORT utility is shipped as an OpenVMS executable image Enamed DCE$IMPORT.EXE. The image resides in the SYS$SYSTEM  directory. JThe DCE IMPORT exclude file is named by default DCE$IMPORT_EXCLUDE.DAT andCalso resides in SYS$SYSTEM. You can change the name or location, orEboth, of this file by defining the logical name DCE$IMPORT_EXCLUDE to(point to the new filename and location. wwpnȧ1 Running_IMPORTLThe DCE IMPORT utility allows system administrators to create principal and >account entries in a DCE registry based on accounts in SYSUAF.?Integrated Login provides two method s of running the DCE IMPORTutility, as follows.@o By invoking the DCE IMPORT utility using a predefined symbol. $ IMPORT IMPORT> FYou can also specify a single DCE IMPORT command on the command line. 5Control returns to DCL after the command is executed. $ IMPORT commandDSYS$COMMON:[SYSMGR]DCE$DEFINE_REQUIRED_COMMANDS.COM defines the DCE Fsymbol IMPORT which is used to invoke the DCE IMPORT utility. If this Esymbol is not defined in your environment, you can define  the symbol as follows:& $ IMPORT :== $SYS$SYSTEM:DCE$IMPORTo By issuing the RUN command.  $ RUN SYS$SYSTEM:DCE$IMPORT IMPORT> wwpnȧ 1 Messages2 IMP_ACCEXISTS -account for already exists in DCE Explanation: A An attempt has been made to recreate an account for  in the DCE registry.  User Action: = None. This is a warning indicating that this suboperation in/ the IMPORT operation was previously performed. 2 IMP_ADDDCE2username successfully imported into DCE Explanation:A A DCE account has been successfully created for OpenVMS username . User Action: None.2 IMP_ADDDCEACC 1account for successfully added to DCE Explanation:  8 A DCE account was successfully created for . User Action: ; None. This is an informational message displayed only if 5 /INFORM is specified on the DCE IMPORT command line.2 IMP_ADDDCEPRN/principal successfully added to DCE Explanation: H Principal record successfully created in the DCE registry.  User Action: ; None. This is an informational message displayed only when5 /INFORM is specified on the DCE IMPORT command line.2 IMP_ADDDCEUAF1username successfully added to DCE$UAF Explanation: = Username successfully added to the DCE$UAF file.  User Action: : None. This is an informational message displayed only if 5 /INFORM is specified on the DCE IMPORT command line.2 IMP_BINDERR &error binding to DCE security registry Explanation: + Unable to bind to the DCE security server. User Action: 6 Note accompanying DCE error message for more details.2 IMP_CREDCEUAFcreated new DCE$UAF file Explanation: A new DCE$UAF file was created. User Action:  None. 2 IMP_DCEERR  Explanation: 3 Accompanying DCE error message supplied with other DCE IMPORT error messages. User Action: 8 Use this message to determine the cause of the problem.2 IMP_DCELOGINerror in DCE login Explanation: $ An error occurred during DCE login. User Action: > Enter a valid DCE username and password when prompted by DCE  IMPORT.2 IMP_DCEUAFERR error searching DCE$UAF Explanation: 4 An error occurred while searching the DCE$UAF file. User Action: 6 Note the accompanying error message for more details.2 IMP_DELACC 2account for principal deleted from DCE Explanation: ? DCE account for was deleted from the DCE registry.H This occurs when an atomic IMPORT operation fails during one of A its suboperations. Such failure prompts a backout of all @ suboperations successfully performed during this IMPORT F operation. Deleting the account is one such backout operation. User Action: < None. This is an informational message displayed only when5 /INFORM is specified on the DCE IMPORT command line.2 IMP_DELDCEUAF 5username successfully deleted from DCE$UAF Explanation: / Username deleted from DCE$UAF file. User Action: : None. This is an informational message displayed only if 5 /INFORM is specified on the DCE IMPORT command line.2 IMP_DELFRGRP (principal from group  Explanation: D Principal was deleted from in the DCE registry.H This occurs when an atomic IMPORT operation fails during one of A its suboperations. Such failure prompts a backout of all @ suboperations successfully performed during this IMPORT E operation. Deleting the principal from the group is one such  backout operation. User Action: < None. This is an informational message displayed only when5 /INFORM is specified on the DCE IMPORT command line.2 IMP_DELFRORG >principal deleted from organization   Explanation: > Principal was deleted from in the A DCE registry. This occurs when an atomic IMPORT operation fails D during one of its suboperations. Such failure prompts a backout of = all suboperations successfully performed during this IMPORT E operation. Deleting the principal from the organization is one such  backout operation. User Action: < None. This is an informational message displayed only when5 /INFORM is specified on the DCE IMPORT command line. 2 IMP_DELPRN&principal deleted from DCE Explanation: 9 Principal was deleted from the DCE registry.B This occurs when an atomic IMPORT operation fails during one of : its suboperations. Such failure prompts a backout of all : suboperations successfully performed during this IMPORT A operation. Deleting the principal is one such backout operation. User Action: ; None. This is an informational message displayed only when5 /INFORM is specified on the DCE IMPORT command line.2 IMP_ERRADDGRP 3error adding principal to group  Explanation: : Could not add to in the DCE registry. User Action: : Note the accompanying DCE error message for more details.2 IMP_ERRADDORG Aerror adding principal to organization  Explanation: = Could not add to in DCE registry. User Action: : Note the accompanying DCE error message for more details.2 IMP_ERRACCEXC 'error accessing DCE IMPORT exclude file Explanation: . Could not access the DCE IMPORT exclude file. User Action:6 Note the accompanying error message for more details.2 IMP_ERRADDEXC *adding username to DCE IMPORT exclude file Explanation: ? Could not add the requested username to the DCE IMPORT exclude file. User Action: 6 Note the accompanying error message for more details.2 IMP_ERRADDUAF %error adding username to DCE$UAF file  Explanation: 9 Could not add the imported username to the DCE$UAF file. User Action: 6 Note the accompanying error message for more details.2 IMP_ERRCRACC&error creating account for  Explanation: 0 Could not create a DCE account for . User Action: : Note the accompanying DCE error message for more details.2 IMP_ERRCRDCEUAF %error creating DCE authorization file Explanation: 2 An error occurred while attempting to create the  DCE$UAF file. User Action: & See accompanying message for details.2 IMP_ERRCRPRN $error creating principal  Explanation: 2 Could not create a principal in the DCE registry. User Action: : Note the accompanying DCE error message for more details.2 IMP_ERRDCEUAF&error accessing DCE authorization file Explanation: 2 An error occurred while attempting to access the  DCE$UAF file. User Action: & See accompanying message for details.2 IMP_ERRDELACC &error deleting account for  Explanation: < Unable to delete account for from DCE registry. User Action: 5 See accompanying DCE error message for more details.2 IMP_ERRDELEXC 4error deleting username from DCE IMPORT exclude file Explanation: @ Could not remove requested username from the DCE IMPORT exclude file. User Action: 6 Note the accompanying error message for more details.2 IMP_ERRDELFRGRP7error deleting principal from group  Explanation: . An error occurred while deleting < from in the DCE registry. This delete operation is 8 performed if the overall IMPORT operation failed and a 3 backout of changes applied to the DCE registry is required. User Action: * See accompanying DCE message for details.2 IMP_ERRDELFRORGEerror deleting principal from organization  Explanation: 2 An error occurred while deleting from0 in the DCE registry. This delete. operation is performed if the overall IMPORT : operation failed and a backout of changes applied to the  DCE registry is required. User Action: * See accompanying DCE message for details.2 IMP_ERRDELPRN $error deleting principal  Explanation: / Unable to delete from DCE registry User Action: 4 See accompanying DCE error message for more details2 IMP_ERRDELUAF )error deleting username from DCE$UAF file Explanation: 3 Could not delete a username from the DCE$UAF file. User Action: 6 Note the accompanying error message for more details.2 IMP_ERRCHGAUT +error changing account authorization policy Explanation: 9 Could not change the DCE account's authorization policy. User Action: : Note the accompanying DCE error message for more details.2 IMP_ERRSPAWN error spawning sub-process Explanation: < An error occurred while spawning a subprocess on the SPAWN command. User Action: ; Refer to appropriate OpenVMS documentation for resolution.2 IMP_ERRSYSUAF error accessing SYSUAF file Explanation: * Could not access the OpenVMS SYSUAF file. User Action: 8 See accompanying OpenVMS or RMS error message for more details. 2 IMP_EXCADD4username added to DCE IMPORT exclude list Explanation:B Username successfully added to the DCE IMPORT exclude ; file. A DCE account will not be created for this username. User Action:  None. 2 IMP_EXCDEL8username removed from DCE IMPORT exclude list Explanation: A Username successfully removed from DCE IMPORT exclude= file. A subsequent IMPORT session could be used to create a DCE account for this username. User Action:  None.2 IMP_EXCLUDED .username has been excluded from DCE Explanation: : Username cannot be imported since it has been ! excluded from the DCE registry.  User Action: ? None. This is an informational message displayed when /INFORM - is specified on the DCE IMPORT command line." 2 IMP_INDCE -username already imported into DCE Explanation: A An import operation was attempted on an already imported OpenVMS username.  User Action: < None. This is an informational message displayed only when 5 /INFORM is specified on the DCE IMPORT command line.2 IMP_INDCEUAF"user already in DCE$UAF Explanation: < Username already exists in the DCE$UAF.DAT file. User Action: = None. This is a warning indicat#ing that this suboperation in/ the IMPORT operation was previously performed.2 IMP_INEXCLUDE6username already in DCE IMPORT exclude file Explanation: A Username has previously been added to the DCE IMPORT  exclude file. User Action:? None. This informational message is displayed when an exclude < operation is attempted on an already excluded username and 8 is displayed only when /INFORM is specified on the DCE  IMPORT command line.2 IMP_I$NTINPDEV #internal error opening input device Explanation:  Error opening SYS$INPUT. User Action: < Verify user runtime environment. See to appropriate OpenVMS documentation for more details.2 IMP_INITERROR initialization error  Explanation: < An error occurred during DCE IMPORT's initialization phase. User Action: < Note error messages accompanying or directly preceding this message.2 IMP_INITWAITinitializing..... Explanati %on: & DCE IMPORT is in initialization mode.  User Action:  None.2 IMP_INVPASSWD (password validation failed. Please retry Explanation: ? The password entered when prompted for a retype does not match! the originally entered password. User Action: 6 Enter correct password for original and retype entry.2 IMP_INPREQ input required! Explanation: - Input not entered where input was mandatory. User Action:  Provide required in"&put.2 IMP_INTERROR internal error Explanation: $ DCE IMPORT internal error occurred. User Action: C Contact your support engineer or Submit a Quality Assurance Report (QAR). 2 IMP_INVDATETM invalid date/time Explanation: & Date/time entered has invalid format. User Action: ; Enter date/time in standard format (dd-MMM-yyyy hh:mm:ss).2 IMP_NODCEUAF%unable to open DCE authorization file Explanation: 9 Error occurred 'while attempting to open the DCE$UAF file User Action:  & See accompanying message for details.2 IMP_NOEXCUSRno excluded users  Explanation: , No users listed in DCE IMPORT exclude file. User Action:  None. 2 IMP_NOGRP group name not specified Explanation: B Mandatory qualifier /GROUP not specified during a noninteractive  IMPORT session. User Action: @ Provide the /GROUP qualifier with the group name on the command lin(e. 2 IMP_NOORG organization name not specified Explanation: : Mandatory qualifier /ORGANIZATION not specified during a  noninteractive IMPORT session. User Action: B Provide the /ORGANIZATION qualifier with the organiation name on  the command line.2 IMP_NOPRIN 4principal does not exist in DCE Registry  Explanation: ; Principal does not exist in the DCE Registry. B This means that does not have a corresponding Ope)nVMS username/account. User Action:  None.2 IMP_NOSUCHEXC no such username in exclude file Explanation: ; Username specified does not exist in DCE IMPORT's exclude  file. User Action: ; Specify username that exists in DCE IMPORT's exclude file.? Enter command SHOW/EXCLUDE to display the entire exclude list.2 IMP_NOSUCHGRP -no group . Please choose a valid group Explanation: = The group name specified is nonexistent in the DCE *registry. User Action: ? Choose a valid group name. Use the DCE tool RGY_EDIT to search" the DCE registry for group names.2 IMP_NOSUCHORG Bno organization . Please choose a valid organization Explanation: ; The organization name specified is nonexistent in the DCE registry. User Action: F Choose a valid organization name. Use the DCE tool RGY_EDIT to search) the DCE registry for organization names.2 IMP_NOSCHPRM 0corresponding pr+imary principal not found in DCE Explanation: @ The DCE principal name specified as the primary principal while? attempting to create an alias principal name is nonexistent in the DCE registry. User Action: > Use the correct DCE principal name. Use the DCE tool RGY_EDIT to view the DCE registry. 2 IMP_NOSCHUSR 9OpenVMS username does not exist on this system Explanation: : An attempt was made to import a nonexistent OpenVMS user. User Action:, Choose a valid OpenVMS user.2 IMP_OUTOPNERR error opening alternate output Explanation:  Could not access output medium User Action: = If /OUTPUT was specified, verify the file name supplied with: /OUTPUT. If /OUTPUT was not specified, check user runtime< environment. See appropriate OpenVMS documentation for more details.2 IMP_PREXISTS +principal already exists in DCE Explanation: 7 An attempt has been made to add to th-e DCE registry.  User Action: = None. This is a warning indicating that this suboperation in/ the IMPORT operation was previously performed.2 IMP_PRINGRP5principal already exists in group  Explanation: < An attempt was made to add to DCE group ; when it already was a member of the group. This action was' attempted during an import operation. User Action: ; None. This is an informational message displayed only when.5 /INFORM is specified on the DCE IMPORT command line.2 IMP_PRINORGCprincipal already exists in organization  Explanation: ; An attempt was made to add to DCE organizationB when it was already a member of that organization.7 This action was attempted during an import operation.  User Action: ; None. This is an informational message displayed only when5 /INFORM is specified on the DCE IMPORT command line.2 I/MP_PRINUSE 8principal in use by another OpenVMS username Explanation: @ The DCE principal name specified for the OpenVMS username being6 imported is associated with another OpenVMS username. User Action: < Choose a DCE principal name that is not associated with any OpenVMS username.2 IMP_RANGEERR 2error in entry! Number must be between 1 and 65535 Explanation: = The value entered for quota is not within the desired range. User Action: 0$ Enter a number between 1 and 65535.2 IMP_TIMERR DCE time configuration error  Explanation: 0 Time configuration incorrect on the DCE system. User Action: = Refer to the Troubleshooting chapter in the Digital DCE for - OpenVMS VAX and OpenVMS Alpha Product Guide.2 IMP_TOOLONGinput for too long  Explanation: < Value of is longer than expected maximum size of value. User Action: 3 Enter a value that is within the 1valid size range.2 IMP_USERERR error getting input from user Explanation: ) Error occurred while getting user input. User Action:  Provide valid input.wwȧ1 ADD9Adds OpenVMS usernames. The ADD command can only be used with the following qualifier:A o ADD/EXCLUDE Adds an OpenVMS username to the IMPORT exclude  list (see /EXCLUDE). 2 /EXCLUDE4Adds an OpenVMS username to the IMPORT exclude list. Format:2 ADD/EXCLUDE USERNAME 3 Parametersusername; Specifies the name of the OpenVMS account to be added to the IMPORT exclude list.wwȧ 1 DELETE?Deletes OpenVMS usernames. The DELETE command can only be used with the following qualifier:I o DELETE/EXCLUDE Deletes an OpenVMS username from the IMPORT exclude  list (see /EXCLUDE). 2 /EXCLUDE9Deletes an OpenVMS username from the IMPORT exclude list. Format: DELETE/EXCLUDE #3 USERNAME 3 Parametersusername: Specifies the name of the OpenVMS account to be deleted from the IMPORT exclude list.wwȧ1 EXIT5Exits the IMPORT utility. You can also exit IMPORT bypressing the Ctrl/Z key. Format: EXITwwȧ 1 IMPORT:The IMPORT command is used to create DCE accounts based on;OpenVMS accounts from an existing System Authorization File (SYSUAF). Format: IMPORT VMS-USERNAME4 Qualifiers Defaults /[NO]CONFIRM & /DCE_LOGIN=(keyword=value,...) /[NO]IMPORT /IMPORT! /[NO]EXCLUDE /NOEXCLUDE /[NO]INFORM /INFORM# /[NO]INTERACTIVE /INTERACTIVE /MY_PASSWORD=passwd None* /OUTPUT[=output] /OUTPUT=SYS$OUTPUT: /[NO]RECAP /NORECAP# /[NO]TEST_ONLY /NOTEST_ONLY! Data Qualifiers Defaults+ /[NO]EXPIRATION_DATE=d /NOEXPIRATION_DATE /FLAGS=flags - /GO5OD_SINCE_DATE=date /GOOD_SINCE_DATE=now /GROUP=group "none" /HOME_DIRECTORY=string NoneA /LIFETIME=hours Taken from registry authorization policy /LOGIN_SHELL=string None /MISCELLANEOUS=string None /ORGANIZATION=organiza "none"* /PASSWORD=passwd No valid password /PRINCIPAL=principal A /RENEWABLE_LIFETIME=ho Taken from registry authorization policy 2 Parameters vms-username: Specifies the name of the OpenVMS account that is t6o be imported.< If an asterisk is specified in place of the vms-username,5 all accounts from the OpenVMS system authorization file are selected. 2 Qualifiers/CONFIRM /CONFIRM /NOCONFIRM< Controls whether the IMPORT command asks for confirmation7 before creating a DCE principal or account, or both.7 In interactive mode the default is /CONFIRM. In non-. interactive mode the default is /NOCONFIRM. /DCE_LOGIN=(keyword=valud[,...]) & 7 /DCE_LOGIN=(keyword=valud[,...])D Provides DCE account details for accounts that are authorized to H create pricipals and accounts in the DCE registry. Valid keywords for+ the DCE_LOGIN qualifier are as follows:  Keyword Description< PRINCIPAL The principal name to be used for authentication5 purposes when creating accounts and/or principals  in the DCE registry.9 If you do not specify a principal with this qualifier * you are prompted for one interactively. 8; PASSWORD The password associated with the principal name / that was specified by the PRINCIPAL keyword.8 If you do not specify a password with this qualifier * you are prompted for one interactively.F If you do not specify a principal or password with this qualifier, I you are prompted for them interactively, regardless of whether or not 9 you are running in interactive mode. This informationF need be entered only once per session, on the first IMPORT command.J S9ubsequent IMPORT commands within the same session do not require that $ you to reenter this information. F If you are an interactive user and you do not specify the PASSWORD H keyword, IMPORT prompts you for your password. The advantage in thisF is the password is not echoed and therefore does not appear on your terminal. /EXCLUDE  /EXCLUDE /NOEXCLUDE (default)< Determines whether or not the OpenVMS account is imported> to the DCE registry. If the O:penVMS account is not imported; then the DCE account is not created and instead an entry: is created in the IMPORT exclude file for the specified OpenVMS account./INFORM /INFORM (default) /NOINFORM < Determines whether or not the user is informed of OpenVMS= accounts that would have been selected for import, but areC not because they either have already been imported (for example,> they have an entry in the DCE$UAF) or they have an entry in the IMP;ORT exclude file. /INTERACTIVE  /INTERACTIVE (default) /NOINTERACTIVE; Controls whether an interactive or noninteractive import is performed.> In interactive mode, a series of questions is asked and the> user's responses are used to determine the account details.1 This mode is well suited to interactive users.A In noninteractive mode, all input is supplied through the data9 qualifiers, and any missing or conflicting data causes> the DCE account t<o not be created. This mode is well suited# to command files and batch jobs.8 Data qualifiers can be specified in interactive mode.< In this case the data they provide is used to provide the; default answers to the relevant questions. All questions are still asked./MY_PASSWORD=passwd /MY_PASSWORD=passwd: DCE requires that you specify your current DCE password: for authentication purposes. If you do not specify your8 DCE password with this qualifier you ar=e prompted for8 it interactively, regardless of if you are running in interactive mode or not.< Omitting this qualifier and allowing IMPORT to prompt you< for your DCE password has the advantage that in this case> the password is not echoed and does therefore not appear on0 your terminal if you are an interactive user./OUTPUT[=output] /OUTPUT[=output]6 Defines where all program output should be written. The default is SYS$OUTPUT:./RECAP /RECAP> /NORECAP (default)8 If /RECAP is specified details of the DCE account are9 displayed before it is actually created. When /CONFIRM6 is also specified the account details are displayed/ immediately before the confirmation request. /TEST_ONLY /TEST_ONLY /NOTEST_ONLY (default)7 If /TEST_ONLY is specified, DCE accounts and DCE$UAFB entries are not created. All other functions operate normally.2 Data_Qualifiers/EXPIRATION_DATE=date /EXPIR?ATION_DATE=date" /NOEXPIRATION_DATE (default)5 Specifies the expiration date for the DCE account.; If not specified, or if /NOEXPIRATION_DATE is specified,> then the DCE account is created without an expiration date./FLAGS=([no]keyword[,...]) /FLAGS=([no]keyword[,...])7 Specifies several attributes of the DCE account. The keywords you can specify are: Keyword Description8 ACCOUNT_VALID A flag that is set to determine accountB @ validity. An account without this flag set5 is invalid and cannot log in.5 The default is ACCOUNT_VALID.: CLIENT A flag that is set to indicate whether or? not the account is for a principal that, can act as a client.. The default is CLIENT.; DUPLICATE_KEYS A flag that is set to determine if ticketsB issued to the account's principa Al can have' duplicate keys.8 The default is NODUPLICATE_KEYS.: FORWARDABLE_ A flag that is set to determine whether aA CERTIFICATES new ticket-granting ticket with a network= address that differs from the presentB ticket-granting ticket network address canB be issued to the account's principal. (The? Proxiable Certificate Flag performs th Be; same function for service tickets.)@ The default is FORWARDABLE_CERTIFICATES.8 PASSWORD_VALID A flag that is set to determine whether> the current password is valid. If this: flag is not set, the next time the= principal logs in to the DCE account,B the system prompts the principal to change% his password.6 C The default is PASSWORD_VALID.; POSTDATED_ A flag that is set to determine if ticketsA CERTIFICATES with a start time some time in the futureA can be issued to the account's principal.@ The default is NOPOSTDATED_CERTIFICATES.; PROXIABLE_ A flag that is set to determine whether orA CERTIFICATE not a new ticket with a different network> address than the present ticket can be? D issued to the account's principal. (The= Forwardable Certificate Flag performs= the same function for ticket-granting! tickets.)? The default is NOPROXIABLE_CERTIFICATE.7 RENEWABLE_ A flag that is set to determine if the< CERTIFICATE ticket-granting ticket issued to theB account's principal can be renewed.If this> E flag is set the authentication service@ renews the ticket-granting ticket if its* lifetime is valid.= The default is RENEWABLE_CERTIFICATE.: SERVER A flag that is set to indicate whether or? not the account is for a principal that, can act as a server.. The default is SERVER.8 TGT_ A flag that is set to determine whether>F AUTHENTICATION or not tickets issued to the account's= principal can use the ticket-granting8 ticket authentication mechanism.2 The default is TGT_AUTHENTICATION./GOOD_SINCE_DATE=date /GOOD_SINCE_DATE=dateE Specifies the date and time that the account was known to be in an uncompromised state. G If not specified, the Good Since Date is set to the current date and time. /GROUP=group G /GROUP=group6 Specifies the name of an existing DCE group that is: associated with the account being created. Note that if; the group does not exist it is not be created by IMPORT.$ The default group name is "none"./HOME_DIRECTORY=string /HOME_DIRECTORY=string> Specifies the directory in which the principal is placed at login.= If not specified the DCE account is created without a Home Directory./LIFETIME=hours /LIFETIME=hours9 H Specifies the maximum amount of time, in hours, that a ticket can be valid.< If not specified the Maximum Certificate Lifetime defined, as registry authorization policy is used./LOGIN_SHELL=string /LOGIN_SHELL=stringA Specifies the shell that is executed when a principal logs in. > If not specified the DCE account is created without a login shell./MISCELLANEOUS=string /MISCELLANEOUS=string= Specifies a text string that is typically uIsed to describe the use of the account.8 If not specified the DCE account is created without a miscellaneous value./ORGANIZATION=organization /ORGANIZATION=organization= Specifies the name of an existing DCE organization that is> associated with the account being created. Note that if the> organization does not exist it is not be created by IMPORT.+ The default organization name is "none"./PASSWORD=passwd /PASSWORD=passwd< Specifies the pJassword to be assigned to the DCE account.> If not specified the DCE account is created without a valid DCE password./PRINCIPAL=(keyword[,...]) /PRINCIPAL=(keyword[,...]): Specifies the principal that is associated with the DCE" account that is being created. < If an existing principal is to be associated with the DCE= account being created then you need only specify NAME (and; ALIAS if its an alias principal). The other keywords are- only used when a new Kprincipal is created.$ The keywords you can specify are: Keyword Description6 ALIAS Specifies that the principal defined< by the NAME keyword is an alias. ByA default the name is considered a primary# principal.< CASE=keyword Specifies how the principal name should beE Formatted. For example, to specify that the E principal name should be all Llowercase, use J /PRINCIPAL=CASE=LOWERCASE. Possible keywords are:< NOEDIT Do not perform anyB Format:ting. This is the2 default.A LOWERCASE[=n1[,n2]]Convert the principal@ name so that the first@ n1 characters and lastC M n2 are lowercase, and theB remainder are uppercase.? If you do not specify= a value for n1 thenA the entire principal isA converted to lowercase.A If you do not specify a@ value for n2 then N0 is/ used.A UPPERCASE[=n1[,n2]]Convert the principal@ name so that the first@ n1 characters and lastC n2 are uppercase, and theB remainder are lowercase.? If you do not specify= a Ovalue for n1 thenA the entire principal isA converted to uppercase.A If you do not specify a@ value for n2 then 0 is/ used./ The default is NOEDIT.9 FULL_ An optional string that is used to more; NAME=string fully qualify a primary name. If t Phe nameB contains spaces, lowercase characters, orB any other special characters, enclose the* string in quotes.5 The default is no full name.; NAME=name The standard name (primary or alias) that? is associated with the DCE account. If< the name contains spaces, lowercase9 characters, or any other specialB Q characters, enclose the string in quotes.< The default is to take the username; from the system authorization file> (SYSUAF) record, edit it according toC the CASE keyword, and then use this as the( principal name.< OBJECT_ The number of registry objects that can be+ CREATION_ created by the principal.@ QUOTA=number If you Rdo not specify this keyword thenB no quota is established and the principalC can create an unlimited number of registry! objects.9 UNIX_ID=number The required UNIX ID that is associated, with the principal.@ If a primary principal is being created< you can omit the UNIX ID and one is1 generated automatically. + S If an alias principal is being created< you must specify the UNIX ID of the1 corresponding primary principal./RENEWABLE_LIFETIME=hours /RENEWABLE_LIFETIME=hours3 Specifies the amount of time, in hours, before a6 principal's ticket-granting ticket expires and that= principal must log into the system again to reauthenticate- and obtain another ticket-granting ticket.> If not specified the Maximum Certificate Renewable LiTfetime4 defined as registry authorization policy is used.wwȧ1 SHOW >Displays OpenVMS usernames. The SHOW command can only be used with the following qualifier:E o SHOW/EXCLUDE Displays OpenVMS usernames in the IMPORT exclude  list (see /EXCLUDE). 2 /EXCLUDE6Displays OpenVMS usernames in the IMPORT exclude list. Format: SHOW/EXCLUDE [USERNAME] Qualifiers Defaults /ALL 1 /OUTPUT=output U /OUTPUT=SYS$OUTPUT: 3 Parametersusername< Specifies the name of the OpenVMS account to be displayedF from the IMPORT exclude list. Full OpenVMS wildcarding is allowed.= If /ALL is on the command line, do not specify a username. 3 Qualifiers/ALL /ALL6 Specifies that all IMPORT exclude entries are to be: displayed. If you do not specify username, then /ALL is assumed./OUTPUT=output /OUTPUT=output* Determines where the output is written. The default is SYS$OUTPUT:.ww