Permissions Required by Slave Replicas
In order to initialize and function properly, slave replicas must have the i, m, and I permissions for the replist object (/.:/sec/replist). A slave server runs under the identity of the machine on which it runs. A machine name is the local host principal name in the following form:
host/hostname/self
The required ACL entry is added when the dce_config tool initially configures the DCE cell's security server and when you use the tool to create new slave replicas. The entry has the following form:
user:host/hostname/self:imI