HP -UX B6941-90001 Administrator's Reference Manual page 442

Figure 10-1
Tuning, Troubleshooting, Security, and Maintenance
ITO Security
3. The RPC client sends the RPC request
4. The RPC server (opcmsgr) checks the ticket with the password in the
key file
The DCE RPC Client-Server Authentication Process
Check
incoming
requests
opcctla
Key file
ITO RPC
Login
opcctlm
Read password
for login
Process Names and Passwords
In ITO, both the management server and the managed nodes run RPC
clients and servers at the same time. Perhaps paradoxically, this allows
ITO to simplify a given process' requirements for configuration
information prior to an RPC call, namely:
name and own password
security level
However, this configuration information must be present on both the
management server and the managed node.
In the context of DCE, ITO associates just two names (or principals)
with the two types of node in its environment, namely: one each for the
management server and the managed node. All management server
process then run under the name associated with the management
server, and all processes relating to the managed node in question run
under the identity of the name associated with the managed node. For
442
Read password
for login
1
2
Login
DCE
security
server
4
Check incoming
requests
Key file
Managed
opcmsga
ITO RPC 3
Management
opcmsgr
Node
Server
Chapter 10