Communicator e3000 MPE/iX Release 7.0 Express 1 (Software Release C.70.01) (30216-90328)

148 Chapter6
Technical Articles
Enhancements to DCE on MPE/iX
amount of specialized ACL code that it might have to deal with.
Since application builders may want to try building their existing applications against
DCE 1.2.1 before migrating their ACL management layer to the DCE supported dce_acl
API, DCE 1.2.1 includes a backward-compatible set of header files that match the header
files used by applications in previous DCE releases.
Replace any instance of:
• #include <dce/daclmgr.h> with #include <dce/daclmgrv0.h>
In makefiles and in the application program, change all instances of:
• daclmgr to daclmgrv0
These header files are provided as a transition aid only and should be used only until the
application is migrated to the dce_acl API.
Removing DCE Credentials
A user’s DCE credentials (stored in the directory /opt/dcelocal/var/security/creds)
are not automatically removed by exiting a shell or logging out. Unless any background
processes require DCE credentials, the credentials can be removed before logging out by
running kdestroy utility. This will make the system more secure by decreasing the
opportunity for someone to maliciously gain access to your network credentials.
The kdestroy command has been modified to allow destruction of credentials older than a
specified number of hours. kdestroy -e exp-period may be run manually to purge older
credential files.
Serviceability Improvements
DCE 1.2.1 has an improved feature of Serviceability. This feature is helpful in debugging
any problems under different sub components of DCE.
The default location for this file is /opt/dcelocal/var/svc/routing. The
DCE_SVC_ROUTING_FILE environment variable can be used to name an alternate
location for the file. The file is consulted if no switch is given on the command line or if no
environment variable (SVC_level or SVC_comp_DBG) is found when a DCE process is
started. Leading whitespace is ignored, as is any line whose first non-whitespace character
is a #.
Production messages are parsed as:
<level>:<where>:<parameter>
<level> is FATAL ERROR WARNING NOTICE NOTICE_VERBOSE or * (meaning all)
<where> is STDERR STDOUT FILE (or TEXTFILE) BINFILE DISCARD
<parameter> is the filename, where “%ld” becomes the process-id
Send all messages to the console:
*. FILE:/dev/console
If FILE or BINFILE ends with “.n.m”, then at most “n” files and at most “m” messages for
each file will be written, where “.n” will be appended to each generation of the file. To keep