Conference tuxedo::dce-products

2207.0. "DCE delegation between 1.3 clients and 2.0 server ?" by CSC32::C_JACOBSON () Wed Apr 02 1997 19:45

    Hello kind folks,
    
    I have no experience with DCE delegation so I am forwarding
    a customers question on the following matter ...
    
    He is developing an application using GSSAPI which requires
    delegation to ultimately access a certain DBM server.
    
    He wants to know if it is possible for his DCE1.3 clients to be
    able to access a delegation server chain on a DCE2.0 system.
    
    The reason he asks is that the majority of his Alphas are locked
    into Digital Unix V3.2C because of software released
    into his production area is not available on V4.0.
    
    He hopes to upgrade just his cell server to V4.0B/DCE2.0
    and delegate from there on behalf of DCE1.3 clients.
    
    Is this possible, or does the delegation API have client
    specific calls which would mandate DCE2.0 on all his hosts ?
    
    Thanks in advance,
    Chris Jacobson
    

RE:            -< DCE delegation between 1.3 clients and 2.0 server ? >-
    
>    He wants to know if it is possible for his DCE1.3 clients to be
>    able to access a delegation server chain on a DCE2.0 system.
 
No.  A 1.0.3 client can not accesss a delegation chain.  However,
you can have a 1.1 intermediary access the chain and then impersonate
a principal in the chain, then present that identity to a 1.0.3 client.

Brian

    Okay,
    
    If the cell server and certain clients are configureed at DCE1.1,
    can other DCE1.03 clients (not requiring the newer features)
    still function in that cell ?
    
    Thanks,
    Chris

    
  >  If the cell server and certain clients are configureed at DCE1.1,
  >  can other DCE1.03 clients (not requiring the newer features)
  >  still function in that cell ?
    
  Yes.