HP DCE/9000 Version 1.7 for HP-UX 11.0 Release Note

22 HP DCE 1.7 for HP-UX 11.0 Release Note
Known Problems and Work Arounds
Known Problems for HP DCE/9000 Version 1.7
For example, to enable peer-to-peer trust between two cells and
permit intercell logins in both directions between them:
dcecp>registry connect /.../_cell_name> \
-facct cell_admin\
-facctpw _cell_admin_pwd>\
-acctvalid\
-facctvalid\
-group none\
-fgroup none\
-org none\
-forg none\
-mypwd _cell_admin_pwd>
• A machine whose name has been changed must be unconfigured and
then reconfigured into the cell; otherwise the old name will be used.
• Support for Integrated Login Password Expiration and Password
Generation is as follows: When a password expires, the corresponding
account is disabled. The user cannot log in until the DCE cell
administrator reactivates the account. The DCE cell administrator
can exempt certain principals from this security feature by attaching
instances of the passwd_override ERA to those principals.
To prevent this problem, users can add the following parameters to
an account line in pam.conf:
✓ -warn_pwd_expiry m will warn a user when his password is
within m days of expiring.
✓ -force_pwd_change n will force a user to change his password
when it is within n days of expiring.
• The new dced-based server configuration and execution features are
not fully functional. The following dcecp commands are not yet
implemented. They will be provided in a future release:
✓ server stop -method rpc
✓ server enable
✓ server disable
✓ server create -starton auto
• To enable printing, you must add the lp administrator to the
passwd_override file; you can do this only if you create the principal
and account for lp in the registry.
• HP MC/ServiceGuard compatibility does not support DFS.