|
NetCrusader/DCE
Data Sheet
DCE is a well-architected, proven,
standards-based solution. |
|
NetCrusader™/DCE. Secure, Heterogeneous Infrastructure for Distributed
Computing Environments.
NetCrusader/DCE is the most widely accepted solution for developing and deploying
secure distributed computing application enterprise-wide. NetCrusader/DCE provides
network security, transparent service location, and cross-platform communication, allowing
organizations to more quickly design client-server and peer-to-peer based applications in
a heterogeneous environment. |
|
" DCE is a well-architected, proven, standards-based solution."
|
NetCrusader/DCE Functionality
and Features
Technical Specifications - Platforms
Supported
NetCrusader/DCE Benefits
NetCrusader/DCE Evaluation
NetCrusader/DCE's main components include:
 | NetCrusader/DCE Security Server
- The NetCrusader/DCE Security Server is based on respected Kerberos
technology, and provides user and application authentication and authorization.
Authorization credentials generated by the DCE Security Server are delegatable, allowing
authorization decisions to be made locally to the applications and within a trusted
cell. The NetCrusader/DCE Security Server manages users, group and permissions, as
well as customizable extended registry attributes. The Security Server is fully
replicable, allowing for optimal network performance through load balancing and automatic
fail-over. It further supports remote management, allowing administrators to handle
highly scalable configurations.
|
| NetCrusader/DCE Directory Server
- The NetCrusader/DCE Directory Server provides location independence for
applications and application servers. Fully replicable data clearinghouses allow for
data redundancy, backup, automatic fail-over, and load-balancing. Clients making use
of the directory service can find registered services without any knowledge of which
machine or where in the network the service lives. Applications can be moved around
the network without any changes to client software or machine configurations.
|
| NetCrusader/DCE RPC -
The NetCrusader/DCE Remote Procedure Call provides a communication protocol with
customizable levels of security, including mutual authentication on a per-connection,
per-call, or per-packet level, cryptographically secured integrity checking, and
per-packet encryption of user data. Through use of DCE IDL (Interface Definition
Language), the programmer is able to make remote calls without having to program to the
lowest network layer. This approach allows for a consistent, easy to use,
programming paradigm for building truly distributed applications. |
NetCrusader/DCE's Functionality and
Features
Gradient's NetCrusader/DCE products provide organizations
with a number of tightly integrated distributed computing services.
Open & Extensible
Gradient's NetCrusader/DCE is based on open source and is fully interoperable with
DCE implementations from other vendors. API's (Application Programming Interfaces)
are provided to allow for user customization in many areas, including writing custom ACL
(Access Control List) managers, and using different methods of authentication, such as
PKI's, smartcards or user-proprietary solutions. NetCrusader/DCE also provides a
proven infrastructure which may be extended to web or component-based applications through
integration with NetCrusader/Web and NetCrusader/CORBA.
Security Services
DCE security services also offer privacy and integrity of communications:
| Data Privacy - ensures the protection of private information through the
use of encryption. |
| Data Integrity - ensures that information is not corrupted and that no
unauthorized, malicious or accidental changes take place to it during transmission. |
Time Services
DCE Time Services regulate the system clocks in a network so that the time kept on
each system is accurate and consistent, providing precise timing for distributed
applications. The result is a system-wide time reference, which increases confidence in
the accuracy of information. This prevents the potential for problems due to a lack of
time synchronization when systems interact on time-dependent processes.
POSIX Threads
DCE Threads, based on the POSIX standard, improve program performance on systems by
permitting the overlap of input and output or other slow operations with faster
operations. Threaded applications consist of multiple threads that execute concurrently,
with CPU time shared among the threads.
NetCrusader/DCE
Benefits
| Security of Information and Resources - The NetCrusader/DCE
security server authenticates all users and servers, ensuring that people, servers, and
applications are who they claim to be. NetCrusader/DCE authorization capabilities
can protect distributed resources from unauthorized use.
|
| Lower the Cost of Maintaining Distributed Applications - The use
of formal interface definitions by DCE RPC allows any number of programmers to write
applications that communicate correctly, while keeping versions and configurations in
sync. The interface definition can be maintained and versioned, and the version
number compiled into the application will ensure that each client finds a compatible
server.
|
| Protection for Expanding Configurations:
- Scalability and Availability - The use of replication for both
security and directory servers aids in network response time, as well as service
availability. NetCrusader/DCE installations in the tens and hundreds of thousands of
users operate successfully today.
|
| Reduced Risk - DCE is a proven technology which has been
successfully deployed for years at hundreds of large organizations in the Global 2000.
NetCrusader/DCE is the worlds foremost implementation of DCE for the desktop, and
is in use at some of the largest enterprises in the world today.
|
| Complies fully with The Open Group DCE specifications - Products
are derived directly from DCE source code, providing multi-platform, heterogeneous
interoperability.
|
| Provides the core set of industry-standard DCE functionality -
Ensures interoperability with a wide variety of platforms including Windows, UNIX systems,
and mainframes.
|
| Delivers a complete set of security services - Provides mutual
authentication, authorization, data privacy and integrity for secure network computing
applications.
|
| Integrates DCE and operating systems with integrated log-in -
Simplifies password management and reduces security risks associated with multiple
sign-ons.
|
| Extensibility - NetCrusader/DCE provides a
proven infrastructure which may be extended to web or component-based applications through
integration with NetCrusader/Web and NetCrusader/CORBA. |
Gradient's NetCrusader/DCE Value-Added Capabilities
In addition to standard DCE features described above, Gradient's NetCrusader/DCE
also supports the following value-added capabilities.
Extended Transport Support
PC-DCE supports both connection-oriented and connectionless transport for RPCs,
including:
| TCP/IP - Transmission Control Protocol/Internet Protocol |
| UDP/IP - Unigram Data Protocol/Internet Protocol |
Performance Enhancements
PC-DCE contains a number of important performance enhancements tuned specifically
for the platforms it supports. For example, the name-space access code has been optimized
for the desktop, providing significant performance enhancements over the UNIX-based TOG
DCE source code.
Secure Remote Access
Dial-in-access for DCE-enabled applications from remote systems or laptops is
supported by Point-to-Point Protocol (PPP). This allows mobile or remote users to connect
to designated corporate information resources. They can do this seamlessly and securely
over public and private networks. DCE's powerful Kerberos-based security ensures that
remote users are authenticated and authorized to access only those services for which they
have assigned privileges. .
Technical Specifications - Platforms
Supported
| PC-DCE - Windows NT 4.0 Workstation & Server, SP3 and above
|
| SYS V - DCE - Compaq Tru64 V4.0 and later; Unisys SYSV V4.0:
Sequent DYNIX/ptx V4.0 |
Orderable Components
| NetCrusader/DCE Runtime - The NetCrusader/DCE runtime consists
of runtime libraries, daemon binaries, administrative tools and online documentation.
This kit is necessary for each machine that will be a DCE client.
|
| NetCrusader/DCE Security Server - At least one NetCrusader/DCE
Security Server is necessary in order to configure a DCE cell. An additional server
kit is necessary for each desired replica. Note: the recommended minimum for
any cell is two servers in order to support fail-over.
|
| NetCrusader/DCE CDS Server - At least one NetCrusader/DCE Cell
Directory Server is necessary in order to configure a DCE cell. An additional server
kit is necessary for each desired replica. Note: the recommended minimum for
any cell is two servers in order to support fail-over.
|
| NetCrusader/DCE ADK - The Application Developers Kit includes
the IDL compiler, as well as header files and libraries necessary to compile DCE
applications. This kit is necessary for any site that intends to develop DCE
applications. Once development is complete, a runtime kit is necessary for each
machine that will run a component of the DCE application. |
Request the NetCrusader/DCE
Evaluation
|
|
