HP OpenVMS Systems

Ask the Wizard Questions

DECnet: DECnet security in cluster

The Question is:

    I'm on cluster with 2 nodes sharing the same SYSUAF.
    To me as a user there is absolutely no difference between
    the two nodes. Most of the time I'm not even sure which
    of the machines I'm working on.
    My question is this: If the two nodes share the same SYSUAF
    why do I then need to be validated through the proxy database
    when I do things like DECnet task-to-task or TCP/IP rexec
    between the two nodes in the cluster ?
    (or is this my misunderstanding ?)

The Answer is:

   This behaviour is a result of the default behaviour of the networking
   protocols -- the protocols have not been configured to recognize that
   the incoming connection as part of the same cluster.  One uses the
   concept of a "proxy" to configure this, and both DECnet and Digital's
   IP package support proxies.

   There are security implications involved in configuring proxies, so
   a review of the documentation around configuring and using proxies
   is advisable.