Changing the RPC Authentication Levels Temporarily

You can reset any of the RPC authentication levels without rebooting the machine by using the cm setprotectlevels command. The values you alter remain in effect until you next reboot the machine.

To change the authentication levels temporarily, do the following:

1. Log in as root on the machine.

2. Issue the cm setprotectlevels command with the appropriate options.

# cm setprotectlevels [-initiallocalprotectlevel level] \
[-minlocalprotectlevel level] \
[-initialremoteprotectlevel level] [-minremoteprotectlevel level]

The various options are defined as follows:

-initiallocalprotectlevel level
Specifies the initial DCE RPC authentication level for communications between the Cache Manager and File Servers within the same cell.

-minlocalprotectlevel level
Specifies the minimum acceptable DCE RPC authentication level for communications between the Cache Manager and File Servers within the same cell.

-initialremoteprotectlevel level
Specifies the initial DCE RPC authentication level for communications between the Cache Manager and File Servers within foreign cells.

-minremoteprotectlevel level
Specifies the minimum acceptable DCE RPC authentication level for communications between the Cache Manager and File Servers within foreign cells.

Where level is the appropriate RPC authentication level. The various levels can be set by specifying a complete string, an abbreviated string, or a corresponding integer value. The valid arguments for level are defined in the Protection Levels topic of the OSF DCE Application Development Guide - Core Components.

The following example command

· Sets the initial authentication level for communications with File Servers in the local cell to packet integrity.

· Sets the minimum authentication level for communications with File Servers in the local cell to packet.

· Sets the initial authentication level for communications with File Servers in foreign cells to packet privacy.

· Sets the minimum authentication level for communications with File Servers in foreign cells to packet privacy.

$ cm setprotectlevels -initiallocalprotectlevel pkt_integ -minlocalprotectlevel 4 \
-initialremoteprotectlevel 6 minremoteprotectlevel 6