Planning and Configuring HP DCE 1.7

Planning and Conﬁguring HP DCE 1.7 1-7

About HP DCE/9000 Version 1.7

HP DCE/9000 Core Services Software

Common Desktop Environment (CDE) and

Online Help

As of HP-UX 10.20 and later releases, the default environment is the

Common Desktop Environment (CDE). (HP VUE was available with

releases of HP-UX earlier than 10.30.) All HP DCE 1.7 online help and

context-sensitive help works in CDE. If you print HP DCE 1.7 online

help and context-sensitive help from CDE, the text is not formatted as it

is on the screen; only text is printed (graphics are not printed).

DES and DES-Hidden Versions of this Release

The DCE Security component uses the Data Encryption Standard (DES)

algorithm as its default encryption algorithm. Because the United States

State Department restricts the export of DES software, HP supplies

three binary versions of the dced daemon and the DCE library

(libdce.1, libdce.2, and libdce.a):

• The U.S./Canada version is available only to HP customers in the

United States and Canada. The U.S./Canada version of libdce

supports use of DES to encrypt RPC argument values, via the

“privacy” authentication level, and the use of DES to encrypt gssapi

messages, via the gss_seal “conﬁdentiality requested” ﬂag. The

U.S./Canada version of dced supports secure remote key table

management.

• The Export version is available to all HP customers. The Export

version of libdce disables the “privacy” authentication level in RPC,

the gss_seal “conﬁdentiality requested” ﬂag, and all program entry

points to DES routines. The Export version of dced does not support

secure remote key table management.

If an application uses the Export version of the DCE library and speciﬁes

the “privacy” level or “conﬁdentiality requested”, the library returns an

error at run time. This restriction does not apply to the U.S./Canada

version of this release.

See the dced (1M) man page for more information about remote key table

management support in the two versions of the daemon.

NOTE Users of the Export version of HP DCE 1.7 should start dced with the -c

option. See the dced man page for more information.