HP DCE/9000 Version 1.7 for HP-UX 11.0 Release Note

HP DCE 1.7 for HP-UX 11.0 Release Note 21
Known Problems and Work Arounds
Known Problems for HP DCE/9000 Version 1.7
• There is a known bug in the k5dcelogin command when called by
rlogin -f to log in to the local node.
If you already have Kerberos credentials on the local node when using
rlogin -f to log in to it, then when you exit or logout, your local
Kerberos credentials will be deleted. This is a known bug in
k5dcelogin, where the local credentials are deleted on completion of
the process.
The workaround is to use rlogin without -f when logging into the
local node. In the remote case, where you are using rlogin -f to log in
to a remote node, it is intended behavior for k5dcelogin to delete the
credentials on the remote system once you exit the remote system.
• Audit events are not generated for authentication services. These
events are: AS_Request, TGS_TicketReq, TGS_RenewReq, and
TGS_ValidateReq.
• The chpass command is not supported.
• Intercell logins are insecure with respect to other logins from the
same cell; therefore, such logins are disabled by default. To facilitate
administrative control over intercell logins, two switches have been
added to the dcecp registry connect command. If you want to
permit intercell logins, specify one or both of the following switches to
the dcecp registry connect command:
Command Definition
acctvalid Marks the local cell account as a valid account. A valid
local cell account allows users from the foreign cell to
login to nodes in the local cell. The default is invalid.
-facctvalid Marks the foreign cell account as a valid account. A
valid foreign cell account allows users from the local
cell to log in to nodes in the foreign cell. The default is
invalid.