Planning and Configuring HP-UX DCE 1.9

Chapter 2
About HP-UX DCE Version 1.9
HP-UX DCE Core Services Software
7
• The DCE cell diagnostic tool dceping.
• An enhanced version of the OSF CDS browser (cdsbrowser), which has been ported to Release 6 of the
X11 Windows system and the Common Desktop Environment (CDE). The browser is accessible through
SAM. See the CDS Browser online help (accessible via the CDS Browser Help menu) for details.
• Two sets of tools for developing DCE applications are available as separately priced options. For DCE
application development in C, HP-UX DCE Version 1.9 Application Development Tools includes a
modified IDL compiler (I2DL), logging facility, error reporting facility, and sample applications.
• cdsclerk (new at HP-UX DCE 1.5) no longer runs as separate processes. cdsclerk functionality has
been merged into the cdsadv process. cdsadv, therefore, is now the only HP-UX DCE CDS client process.
• dced (new at HP-UX DCE 1.5) supports the new -r option. This option starts dced in remote-update
mode, which allows DCE cell administration tasks to be performed by an administrator on a remote
machine. In order to help prevent attacks, the dced default behavior is to disallow any remote
administration.
• HP has enhanced the dcecp registry connect command with two new options that support intercell
login:
See "Establishing Peer-to-peer Trust" in Chapter 7 for more information on these important new options.
• HP has added a new -r option, which refreshes a user's credentials, to dce_login. Users are encouraged
to use dce_login -r rather than kinit to refresh their credentials, since dce_login -r uses the more
secure DCE Third-party pre authentication protocol, whereas kinit uses the less secure Kerberos 5
Timestamps protocol.
• HP has changed the default behavior of its configuration tools to automatically enable audit filtering. In
addition, the default behavior of secd has been changed to enable audit filtering at start-up, and a new
secd option, -noauditfilters, had been added to disable audit filtering. See "Configuring the DCE
Audit Service" in Chapter 5, and the online secd manpage for more information.
• Support for large UIDs.
• Support for context-switching 64-bit machine registers in DCE threads (libcma and libdcekt).
• Support for MC/ServiceGuard.
DCE Features Not Supported by OSF DCE 1.2.1
Cell renaming is documented but not supported by OSF DCE 1.2.1 (or by HP-UX DCE 1.9). Transitive trust
between hierarchical cells is documented but not supported by OSF DCE 1.2.1 (or by HP DCE 1.9).
-acctvalid Marks the local cell account as a
valid account. A valid local cell
account allows users from the
foreign cell to login to nodes in the
local cell. The default is invalid.
-facctvalid Marks the foreign cell account as a
valid account. A valid foreign cell
account allows users from the local
cell to login to nodes in the foreign
cell. The default is invalid.