HP DCE/9000 Version 1.7 for HP-UX 11.0 Release Note

HP DCE 1.7 for HP-UX 11.0 Release Note 15
What’s In This Version
Other Information
recommended that application developers plan now for this transition.
HP plans to preserve binary compatibility. However, developers can
prepare for this change as follows:
1. Isolate new threads API usage to macros or wrapper APIs.
2. Minimize the use of signals, and use only POSIX semantics when
programming with signals.
For example, we recommed that thjreaded applications use only the
functions sigaction(), sigprocmask(), and sigwait().
HP DCE 1.7 U.S./Canada Software
The DCE Security component uses the Data Encryption Standard (DES)
algorithm as its default encryption algorithm. Because the United States
State Department restricts the export of DES software, HP supplies two
binary versions of the dced daemon and DCE library (libdce.1,
libdce.2, and libdce.a):
• The U.S./Canada version of HP DCE 1.7 is available only to HP
customers in the United States and Canada. The U.S./Canada version
of libdce supports use of DES to encrypt RPC argument values, via
the “privacy” authentication level, and the use of DES to encrypt
gssapi messages, via the gss_seal “confidentiality requested” flag.
The U.S./Canada version of dced supports secure remote key table
management.
• The Export version of HP DCE 1.7 is available to all HP customers.
The Export version of libdce disables the “privacy” authentication
level in RPC and also disables all program entry points to DES
routines. The Export version of dced does not support secure remote
key table management.
If an application uses the Export version of the DCE library and specifies
the “privacy” level or the “confidentiality requested flag”, the library
returns an error at run time. This restriction does not apply to the
U.S./Canada version of this release.
See the dced man page for more information about remote key table
management support in the two versions of the daemon.
NOTE Users of the Export version of HP DCE 1.7 should start dced with the -c
option. See the dced man page for more information.