HP DCE/9000 Version 1.7 for HP-UX 11.0 Release Note

20 HP DCE 1.7 for HP-UX 11.0 Release Note

Known Problems and Work Arounds

Known Problems for HP DCE/9000 Version 1.7

• If you use standard UNIX remote login utilities (remsh, rlogin,

telnet) to perform remote DCE cell administration, these utilities

may expose the cell administrator’s password to network attackers.

The most secure way to perform cell administration is to log in locally

on each system that requires administration.

• A user’s DCE credentials are not automatically removed by exiting a

shell or logging out.

Use kdestroy to remove credentials that are no longer needed. The

-e option of kdestroy removes credentials older than a speciﬁed

number of hours.

• When you run dcecp in “local” mode (that is, when you start dcecp

with the local option) on a host with dced in partial-service mode,

there is a possibility that a dcecp “acl modify -add” command

will not work. The interactive dcecp session may hang or a Bus Error

may be returned.

One workaround for this condition is to run dcecp in normal mode on

a host with dced also in normal mode and then execute the command

again. Alternatively, you can quit out of “local” mode between acl

modify -add commands. For more information, see Planning and

Conﬁguring HP DCE 1.7.

• As of HP DCE 1.6, dcecp’s secval activate and secval deactivate

commands became asynchronous. They return before the actual

change takes place within dced. (Prior to HP DCE 1.6, secval

activate and secval deactivate were synchronous and didn’t return

until the actual state change ﬁnished in dced.)

You should use the secval status command to verify the state

change. Although future HP DCE/9000 releases may reimplement

synchronous secval activate and deactivate commands, the

veriﬁcation by secval status is still recommended.

• Not all of the operations of the dcecp host command are

implemented.

• The “add cellname as preferred” cdscp command has been

removed. The use of the “add cellname as preferred” command

to set a new primary cdsalias name for a local cell causes the cell to

have problems.

• The dcecp commands rpcentry, rpcgroup, and rpcproﬁle do not

support the -version option.