Managing the transition to OSF DCE security

Abstract

OSF DCE security and UNIX system security each support independent representations of user identities. We infer from OSF's implementation of DCE security that either the two security environments are to be kept separate, or that UNIX system security is to be strictly aligned with DCE Security. Neither solution is usually practical for established UNIX system installations that are only beginning to use DCE technology. This paper describes a set of tools that enables the compatible and secure coexistence of the two security environments. These tools are provided with SNI's DCE product for our System V Release 4 based SINIX operating system and UNIX Systems Laboratories' (USL) DCE product. They are intended to be used as transition aids until migration to DCE is complete. They introduce no compromises to either security system, and they accommodate familiar and well-established UNIX system security administration practices and policies.