How to Configure a Different Domain of Interpretation

If your site does not use a Domain of Interpretation (DOI) of 1, you must modify the doi value in every security template. For more information, see Domain of Interpretation in Security Templates.

Before You Begin

You are in the root role in the global zone.

• Specify your DOI value in the default security templates.

  # tncfg -t cipso set doi=n
  # tncfg -t admin_low set doi=n

  ---

  Note - Every security template must specify your DOI value.

  ---

See also

• Network Security Attributes in Trusted Extensions

• How to Create Security Templates

Next Steps

If you plan to use LDAP, go to Chapter 5, Configuring LDAP for Trusted Extensions. You must configure LDAP before you create labeled zones.

Otherwise, continue with Creating Labeled Zones.