Gradient DCE for Tru64 UNIX Product Guide

Software Version 4.2

Table of Contents

Notices

Intended Audience
Overview of this Guide
Conventions
Related Documentation
Contacting Entegrity Solutions
Obtaining Technical Support
Obtaining Additional Technical Information
Obtaining Additional Documentation

1.1 Overview of the Software
1.2 Kit Contents

1.2.1 Runtime Services (RTS) Subset
1.2.2 Cell Directory Server Subset
1.2.3 Security Server Subset
1.2.4 Application Developer's Kit Subset
1.2.5 Online Manual Pages Subset
1.2.6 Distributed File Service Runtime Services Subset
1.2.7 DFS Kernel Binary Subset
1.2.8 DFS Utilities Subset
1.2.9 DFS Online Manual Pages
1.2.10 NFS-DFS Secure Gateway Server

1.3 Platforms and Networks Supported by Gradient DCE for Tru64 UNIX

1.3.1 Interoperating with PCs
1.3.2 Network Support

1.4 Threads
1.5 Enhancements to OSF DCE

1.5.1 CDS Enhanced Browser
1.5.2 IDL Compiler Enhancements
1.5.3 The RPC Event Logger Utility
1.5.4 Name Service Interface Daemon for Microsoft RPC
1.5.5 Security Integration Architecture
1.5.6 RPC Support of DECnet/OSI (Phase V)
1.5.7 DTS Support of DECnet/OSI (Phase V)
1.5.8 CDS Cache Clerk Enhanced Memory Management
1.5.9 CDS Preferencing
1.5.10 DTS Support for DLI (Data Link Interface) and RPC
1.5.11 LDAP Directory Service
1.5.12 New localrpc Protocol Sequence
1.5.13 Kerberos 5-Compliant Utilities
1.5.14 DCE in a Tru64 UNIX TruCluster Application Server Environment

1.6 Diskless Support Removed from OSF DCE
1.7 Restrictions Using Gradient DCE for Tru64 UNIX

1.7.1 DCE DFS Restrictions and Limitations
1.7.2 Utility Restriction
1.7.3 DIGITAL X.500 Restrictions

2.1 Overview of Compatibility with Other DCE Systems
2.2 Overview of Interoperability with Other DCE Systems
2.3 DCE DFS Interoperability and Compatibility
2.4 CDS and DECnet/OSI DECdns Compatibility
2.5 Interoperability with DECnet Phase IV and DECnet/OSI
2.6 Interaction Between DCE DTS and DECnet/OSI DECdts

2.6.1 Changing the Default for DCE DTS to RPC

3.1 Overview of SIA
3.2 Benefits of SIA
3.3 Using SIA
3.4 Using the SIA Configuration Program
3.5 How DCE Security Affects the Security-Sensitive Commands and Routines

3.5.1 Login-Related Commands

3.5.1.1 login Command
3.5.1.2 The su Command

3.5.2 Registry Information Change Commands
3.5.3 Registry Information Inquiry Routines

3.6 Using DCE SIA With the Tru64 UNIX Enhanced Security Option
3.7 Performance Considerations for DCE SIA

3.7.1 Performance of getpwent( ) and getgrent( ) Functions
3.7.2 The Impact of DCE SIA on Login Performance
3.7.3 UID Management
3.7.4 Executables in /sbin
3.7.5 rlogin
3.7.6 Changing root Password
3.7.7 Credentials Obtained for Intercell Login are Poorly Protected

3.8 Performance Considerations for Registry Replication
3.9 Group Override and the group_override File

3.9.1 Use of /opt/dcelocal/etc/group_override
3.9.2 Effect of Local Override on Group Data

3.10 Additional Information

4.1 Overview of DCE Directory Service
4.2 How the DCE Components Use the DCE Directory Service
4.3 How to Use DCE Directory Services
4.4 Directory Services and the Cell Environment
4.5 How Cells Determine Naming Environments

4.5.1 Global Names
4.5.2 Hierarchical Cell Names

4.6 Alias Cell Names
4.7 Cell-Relative Naming in a Standalone Cell
4.8 Cell-Relative Naming in a Hierarchy of Cells

4.8.1 Local Filenames
4.8.2 An In-Depth Analysis of DCE Names

4.9 CDS Names

4.9.1 Names
4.9.2 LDAP Names
4.9.3 DNS Names
4.9.4 Names Outside of the DCE Directory Service

5.1 Overview of CDS Directory and Clearinghouse Operations

5.1.1 Reorganizing Existing CDS Directory Replicas
5.1.2 Creating Additional CDS Directory Replicas

5.2 Enhanced Browser

5.2.1 Displaying the Namespace
5.2.2 Filtering the Namespace Display

5.3 CDS Enhanced Cache Memory Control
5.4 CDS Clearinghouse Preferences

6.1 Overview of LDAP
6.2 How NSI Works

6.2.1 LDAP Syntax
6.2.2 NSI Configuration
6.2.3 Configuration File Format and Syntax
6.2.4 NSI Call Categorization
6.2.5 Name Service Selection
6.2.6 Name Translation from CDS to LDAP

6.3 Using NSI

6.3.1 Modifying Runtime Configuration Options
6.3.2 Application Programming
6.3.3 NSI Known Limitations

6.3.3.1 Security
6.3.3.2 Schema
6.3.3.3 Schema for Storing RPC Entries in a Directory Service

6.3.4 Objects and Attributes

6.3.4.1 Notation
6.3.4.2 Object Naming
6.3.4.3 Object Definitions
6.3.4.4 RPC Entry
6.3.4.5 RPC Group
6.3.4.6 RPC Profile
6.3.4.7 RPC Server
6.3.4.8 Attribute Definitions
6.3.4.9 The rpcNsObjectID
6.3.4.10 The rpcNsGroup
6.3.4.11 The rpcNsPriority
6.3.4.12 The rpcNsProfileEntry
6.3.4.13 The rpcNsInterfaceID
6.3.4.14 The rpcNsAnnotation
6.3.4.15 The rpcNsCodeset
6.3.4.16 The rpcNsBindings
6.3.4.17 The rpcNsTransferSyntax

6.3.5 Usage Model

6.3.5.1 Relative Names

6.4 How GDA Works

6.4.1 Cell Naming
6.4.2 Security
6.4.3 Registration Utility

7.1 Overview of Intercell Naming
7.2 How the Global Directory Agent Works
7.3 Managing the Global Directory Agent
7.4 Enabling Other Cells to Find Your Cell

7.4.1 Defining a Cell in the Domain Name System
7.4.2 Defining a Cell in the Global Directory Service
7.4.3 Defining a Cell in an LDAP Server

8.1 Variation from OSF DFS
8.2 Using Tru64 UNIX ACLs

8.2.1 Tru64 UNIX ACL Limitations
8.2.2 DCE Responses to Tru64 UNIX ACL Operations
8.2.3 Mapping between DCE ACLs and Tru64 UNIX ACLs
8.2.4 Disabling ACL Operations

8.3 NFS-DFS Secure Gateway Server Administration
8.4 DFS Backup
8.5 Solutions to Common Problems with DCE DFS

8.5.1 Running Commands Requiring the setuid Feature
8.5.2 Running cron Jobs with DCE Credentials

9.1 Overview of the Command Format

10.1 Overview of Enhancements
10.2 Local RPC Protocol Sequence

10.2.1 Using localrpc with well-known endpoints
10.2.2 Affected RPC API calls
10.2.3 Suppressing localrpc (or any other protseq)
10.2.4 Permissions of localrpc Socket
10.2.5 Added dced Support
10.2.6 Compatibility Issues

10.3 DTSD Timing and Timeout Changes

10.3.1 Affected RPC API Call

10.4 Using Environment Variables to Restrict Network Interfaces and Addresses
10.5 IDL and ACF Enhancements

10.5.1 Automatic Binding Enhancement
10.5.2 Enumeration in IDL
10.5.3 The client_memory ACF Attribute

10.6 IDL Compiler Enhancements

10.6.1 The -standard Build Option
10.6.2 Stub Auxiliary Files
10.6.3 Generating Application Templates Using the IDL Compiler
10.6.4 Example of IDL Template Feature

10.6.4.1 Example Interface Definition File
10.6.4.2 Example Manager Template
10.6.4.3 Creating the Executable Manager Program

10.6.5 C++ Application Support

11.1 Overview of Debugging Support
11.2 Introduction to the RPC Event Logging Facility
11.3 Generating RPC Event Logs

11.3.1 Enabling Event Logging
11.3.2 Using the -trace Option
11.3.3 Combining Event Logs
11.3.4 Disabling Event Logging

11.4 Using Environment Variables and the Log Manager to Control Logging Information

11.4.1 Controlling Logged Events with Environment Variables
11.4.2 Controlling Logged Events with the RPC Log Manager

11.5 Using the -trace Option, Environment Variables, and the Log Manager Together
11.6 Using Event Logs to Debug Your Application
11.7 Event Names and Descriptions
11.8 Summary

12.1 Overview of Applications with FORTRAN
12.2 Interoperability and Portability
12.3 Remote Procedure Calls Using FORTRAN — Example

12.3.1 Where to Obtain the Example Application Files
12.3.2 The Interface File and Data File (payroll.idl and payroll.dat)
12.3.3 Compiling the Interface with the IDL Compiler
12.3.4 The Client Application Code for the Interface (print_pay.for)
12.3.5 The Server Initialization File (server.c)
12.3.6 The Server Application Code for the Interface (manager.for)
12.3.7 Client and Server Bindings
12.3.8 Building the Example (Makefile.unix)
12.3.9 Running the Example

12.4 Remote Procedure Calls Using FORTRAN — Reference

12.4.1 The FORTRAN Compiler Option
12.4.2 Restrictions on the Use of FORTRAN
12.4.3 IDL Constant Declarations
12.4.4 Type Mapping
12.4.5 Operations

12.4.5.1 Parameter Passing by Reference
12.4.5.2 Function Results

12.4.6 Include Files
12.4.7 The nbase.for File
12.4.8 IDL Attributes

12.4.8.1 Binding Handle Callout
12.4.8.2 ACF file
12.4.8.3 Generated header file
12.4.8.4 Generated client stub
12.4.8.5 Binding callout routine
12.4.8.6 Error handling
12.4.8.7 Predefined binding callout routine
12.4.8.8 The transmit_as Attribute
12.4.8.9 The string Attribute
12.4.8.10 The context_handle Attribute
12.4.8.11 The Array Attributes on [ref] Pointer Parameters

12.4.9 ACF Attributes

12.4.9.1 The implicit_handle ACF Attribute
12.4.9.2 The represent_as ACF Attribute

13.1 Overview of Remote Procedure Call Programs
13.2 RPC Test Program #1
13.3 RPC Test Program #2
13.4 RPC Test Program #3
13.5 Book Distributed Calendar Program
13.6 The Time Operations Sample Application

13.6.1 Overview
13.6.2 Building timop_svc
13.6.3 Setting Up to Run timop_svc
13.6.4 timop_svc Message Catalog
13.6.5 Running the timop_svc Server
13.6.6 Running the timop_svc Client
13.6.7 Sample Server Output
13.6.8 Stopping timop_svc
13.6.9 timop_svc Server Options
13.6.10 timop_svc Client Options
13.6.11 timop_svc Principal And Keytab Names
13.6.12 timop_svc Debug Message Levels

13.7 Microsoft RPC Phonebook Program

13.7.1 Source Files for the phnbk Example
13.7.2 Building the Tru64 UNIX phnbk Client and Server Programs
13.7.3 Starting and Stopping the phnbk Server
13.7.4 Starting and Stopping the phnbk Client Program

13.8 The Echo Example Program
13.9 Time Provider Example Programs
13.10 The Serviceability API Sample Program

13.10.1 Building the Program

13.11 The Generic Sample Application

13.11.1 Building the Sample Application
13.11.2 Installing the Sample Application
13.11.3 Running the Sample Application

13.11.3.1 Running the Client

13.11.4 What the Sample Application Does
13.11.5 Viewing the Server ACL
13.11.6 Notes

13.12 Object Oriented idl Programs

13.12.1 Preparing to Run the Example Programs
13.12.2 The account Example Program
13.12.3 The accountc Example Program
13.12.4 The card Example Program
13.12.5 The stack Example Program

[Next] [Index]

To make comments or ask for help, contact support@entegrity.com.

Copyright © 2001 Entegrity Solutions Corporation & its subsidiaries.

Copyright © 1998-2001 Compaq Computer Corporation.

All rights reserved.