| ### Security Service Objects The DCE control program has functions that operate on the following security service components: principal This object represents registry principals. These principals can be human users of the network, servers on the network, machines on the network, or cells with which the local cell will engage in cross-cell authentication. group This object represents registry groups. Groups are collections of principals for which you can assign access rights to objects. organization This object represents registry organizations. Organizations are collections of principals to whom you can assign policies that expand your areas of administrative control. account This object represents the accounts that are established in the registry for principals. registry This object represents the registry, or the DCE Security Service's database of account information, in a DCE cell. The registry copy operated on can be either the master replica or a slave replica. xattrschema This object operates on the schemas, or the definitions, for extended registry attributes (ERAs) that you specify for DCE Security Service components and data maintained by the host daemon (dced) on the local host. acl This object represents the ACLs for all of the DCE entities that can be protected by the ACL facility of the DCE Security Service. keytab This object represents the files that store the keys, or passwords, for authenticated server principals in the DCE Security Service. ###