HP-UX Integrated Login

Integrating DCE with HP-UX Integrated Login

restrictions, and semantics. Also, be aware that configuring the UNIX backend as a backup technology can cause the following known problems:

If the DCE registry enforces hidden passwords (which it does by default), an asterisk (*) is placed in /etc/passwd for all entries and the UNIX backup will be unable to process any password. Therefore, configuring UNIX as the fallback login technology will fail to authenticate the user and cause confusion when attempting to change a password. Unless you plan not to enforce hidden passwords, do not configure UNIX as the backup technology.

The UNIX backend will fail for any username longer than eight characters, which is the maximum length for a UNIX username. Specifically, this means that:

If the primary login technology fails (for example, if secd is down) the UNIX backup technology will deny system access to users with long usernames.

If secd is down, the UNIX backup technology will not allow users to use the su command to access accounts that have long usernames.

If secd is running and the user enters the passwd command to change the password for an account with a long username, the UNIX backup technology will not process the password change. Specifically, the following messages will display:

Password successfully changed in DCE registry

Invalid login name.

The first line in the message indicates that the password has been changed in DCE. The second line indicates that the password information in /etc/passwd is unchanged because of the UNIX restriction on the long usernames.

If secd is running, DCE will deny access to the machine to any users with long usernames whose accounts are set to pwdvalid no, or who use the force_pwd_expiry <n> feature and whose passwords will expire within n days.

DCE allows cell_admin to change the password of any other principal. However, UNIX does not allow this behavior. Therefore, if a user logs in as cell_admin and tries to change another user’s password, the following message will display:

6-20

Planning and Configuring HP DCE 1.7

Page 144
Image 144
HP UX DCE Software manual Integrating DCE with HP-UX Integrated Login

UX DCE Software specifications

HP UX DCE Software, or Hewlett-Packard UNIX Distributed Computing Environment, represents a significant tool in the realm of distributed system architecture. Designed primarily for enterprise environments, HP UX DCE enhances the reliability, scalability, and manageability of applications over diverse networked systems.

One of the main features of HP UX DCE is its ability to integrate various computing platforms, enabling seamless communication and resource sharing across distributed nodes. This facilitates the creation of complex applications that can operate on a multitude of systems, thus enhancing operational flexibility. DCE employs standardized interfaces, which means applications written for one platform can run on any other platform that supports DCE, promoting cross-platform compatibility.

In terms of technologies, HP UX DCE utilizes Remote Procedure Calls (RPC) as a core feature. This mechanism allows different applications to communicate and invoke procedures on remote systems as if they were local calls. Additionally, DCE includes a robust security model that incorporates Kerberos for authentication, ensuring that communication between nodes remains secure and protected against unauthorized access.

Another significant characteristic of HP UX DCE is its distributed file system, which allows for transparent file access across different machines. The DCE File System (DFS) provides a unified namespace and manages data replication and consistency across distributed storage resources. This reduces the complexity of data management and enhances data availability.

HP UX DCE also supports a variety of programming languages, making it accessible for developers accustomed to different coding environments. This versatility encourages widespread adoption and innovation, as developers can leverage existing skills to create distributed applications.

Furthermore, HP UX DCE is built for high availability, ensuring that critical applications remain responsive even in the face of hardware or network failures. Its inherent component redundancy and fault-tolerant architecture are designed to minimize downtime, which is essential for mission-critical applications in enterprise scenarios.

In conclusion, HP UX DCE Software provides a comprehensive framework for developing, deploying, and managing distributed applications. Its core features such as RPC support, a secure authentication mechanism, a robust file system, and cross-platform compatibility make it a vital resource for organizations aiming to leverage distributed computing effectively. As enterprises evolve, HP UX DCE stands out as an influential solution in the dynamic landscape of distributed environments.