Planning and Configuring HP-UX DCE 1.9

Chapter 6

Conﬁguring HP-UX DCE Cells

Conﬁguring Cells with DCM

Overview of DCM Functionality

DCM enables you to perform the following cell conﬁguration tasks:

• In a conﬁgured and running cell, if the primary DCE services (Initial CDS and Master Security) are

running on HP systems (as opposed to other vendors' systems), you can conﬁgure additional HP-UX DCE

1.2, 1.2.1, 1.3.1, 1.4, 1.4.1, 1.4.2, 1.5, 1.6,1.7, or 1.9 clients into the cell from any HP-UX DCE 1.9 cell

member system.

• Create a cell of one or more systems. DCM provides a "template" mode that simpliﬁes cell creation.

• User authentication of cell conﬁguration operations.

• Add and remove client systems (systems running DCE client software only) to an existing cell from any

system in the cell.

• Add replicated security servers to an existing cell.

• Add additional CDS servers to an existing cell. You can add new systems to the cell as CDS servers, or

reconﬁgure existing cell members as CDS servers.

• Add or modify local or global DTS servers or DTS clients in the cell and modify ntp, spectracom,ornull

DTS time providers in the cell.

• Add or remove GDA servers on existing cell nodes.

• Stop all DCE daemons on all cell members or selected cell members.

• Restart all DCE daemons on all cell members or selected cell members.

• Destroy (unconﬁgure) an existing cell.

At the heart of DCM is an

object list

screen that displays a list of all cell members and their attributes.

The attributes include a cell member's name, and the DCE services (if any) conﬁgured on the member. You

perform tasks on selected cell members by selecting (highlighting) the desired members in the list and then

selecting the appropriate actions from an Actions menu.

By using the List menu, you can switch to a template mode that allows you to create prototype DCE cell

conﬁgurations that can (and must) be tested for validity before actually being created.

Important Security Warning

CAUTION DCM uses standard UNIX remote login utilities to perform remote administration. This causes

the cell administrator's password to be sent over the network whenever you perform a task on a

remote system. If someone is very closely monitoring the network trafﬁc, they could obtain the

password and the security of the cell's DCE services will be compromised. Note, however, that

using DCM is no more or less secure than using standard UNIX remote login utilities directly.

(Secure Internet Services (SIS) do not provide better security for the purpose of remote DCE

cell administration.)