Planning and Configuring HP DCE 1.7

Planning and Conﬁguring HP DCE 1.7 6-13

HP-UX Integrated Login

Integrating DCE with HP-UX Integrated Login

Integrating DCE with HP-UX Integrated

HP DCE/9000 provides support for integrating DCE with HP-UX

Integrated Login. The binaries for this functionality are included in the

AUTH-DCE ﬁle set.

Overview of HP-UX Integrated Login Features

The HP-UX Integrated Login utilities provide the following features:

• If DCE is conﬁgured as the login technology, the Integrated Login

utilities authenticate users via the DCE Security Registry, giving

users DCE credentials upon HP-UX login. This makes it possible for

system administrators to use DCE as the primary source of user

information.

• If DCE is conﬁgured as an additional technology, the Integrated Login

utilities attempt to get DCE credentials for a user after the user

successfully logs in via another technology.

• In HP-CDE, each window created during an HP-CDE session inherits

the user’s DCE credentials. (Otherwise, a user would have to run

dce_login in every window in which DCE operations are desired.)

• Integrated dtsession refreshes DCE credentials upon unlocking the

HP-CDE session.

• If the DCE backend to the Name Service Switch (NSS-DCE) is

activated, the getpwnam and getgrnam family of calls will retrieve

user account information from the DCE registry (rather than from

/etc/passwd). This allows UNIX utilities to function properly without

requiring that /etc/passed be synchronized with the DCE registry.

For backup purposes, it is still recommended that /etc/passwd be

synchronized with the DCE registry, but this synchronization can be

done less frequently if NSS-DCE is activated.