HP 3000 Manuals

Release Limitations [ DCE for the HP 3000 ] MPE/iX 5.0 Express III Documentation


DCE for the HP 3000

Release Limitations 

Some of the limitations described here reflect limitations of OSF DCE
1.0.2, other limitations are specific to this release only.

Limitations of OSF DCE 1.0.2 

   *   There is no support for application localization (only English is
       supported), or for application internationalization.

       _________________________________________________________________ 

       NOTE  Localization is defined as making software interfaces appear
             in the native language of the country in which the software
             is run.  For example, all the user interfaces and messages
             of an application localized for Italy would be in the
             Italian language.

             Internationalization is defined as enabling an application
             that is distributed across international boundaries to be
             localized for users in different countries.  For example, an
             application might consist of a server that communicates with
             clients in Japan and the Netherlands.  The internationalized
             server could return information in such a form that its
             clients in Japan could display the information in Japanese,
             and its clients in the Netherlands could display the
             information in Dutch.

       _________________________________________________________________ 

   *   The passwd_import tool, which imports user account information
       from /etc/passwd files to the Registry database, does not import
       the passwords themselves.  Therefore, after you have used the
       passwd_import tool to create skeletal DCE accounts in the Registry
       database, you must use the rgy_edit tool to add passwords to those
       accounts.

Unsupported Configurations 

DCE/3000 (version A.01.12) does not support any of the OSF DCE extended
services and configurations, this includes:

   *   DFS

   *   X.500 Global Directory Services

   *   Access to the CDS namespace through the X/Open Directory Service
       (XDS) and X/Open Ojbect Management (XOM) services

   *   Diskless Operation

   *   The "+" character.  This is not supported in the MPE/iX HFS name
       syntax; therefore, GMT files (GMT+0 through GMT+13) cannot be
       created under /opt/dcelocal/etc/zoneinfo.  This could cause the
       dtscp program to interpret your local time incorrectly from the
       show   current time command.

Interoperability of the Domestic and International Versions 

The Domestic and International versions are interoperable with one
limitation, Domestic-based application servers or clients that specify
the privacy RPC data protection level are not interoperable with servers
or clients based on the International version.

Neither the Domestic or International versions of DCE are interoperable
with any DCE version that have been built with the DES code omitted.
Some DCE ports from other vendors were built in this way in order to meet
United Sates export requirements.  If you are running a DCE port from
another vendor, check with that vendor for details.

Compatibility between DCE/3000 A.01.02 and DCE/3000 A.01.12 

The OSF DCE functions offered in both releases are the same.  Mixed
versions of clients and servers within a DCE/3000 cell environment are
compatible.  However, DCE applications that are built with the shared
library cannot be moved to another system that is running DCE/3000
version A.01.02; version A.01.02 has no shared library support.  DCE
applications that are built with the archive library (libdce.a) can run
on either DCE/3000 versions A.01.02 or A.01.12.

Kerberos Authentication Protocol Compatibility 

The DCE Security authentication service implements the Kerberos Version 5
Revision 5 protocol specification.  Although Kerberos Version 5 includes
backward compatibility support for Kerberos Version 4, DCE Security does
not implement this support.

Security for DCE User Accounts 

A user's DCE credentials are not automatically removed by exiting a shell
or logging out.  Unless you plan to leave background processes running
that require your DCE credentials, you should manually remove your
credentials before logging out by running the kdestroy utility.  This
makes the system more secure by decreasing the opportunity for someone to
gain access to your network credentials.

If you do not use kdestroy, DCE credentials are retained in the directory
/opt/dcelocal/var/security/creds.  To avoid unnecessary disk space usage,
inactive credential files should be periodically purged from this
directory.



MPE/iX 5.0 Express III Documentation