



Open Group Releases DCE 1.2.2 as Free Software 162
lkcl writes "The Open Group announced 12th January 2005 that they are releasing DCE/RPC 1.2.2 as a Free Software Project - under the LGPL. This is a major coup for Free Software: the Distributed Computing Environment is known to be involved in some major projects. There is a mirror at opendce.hands.com which runs rsync,
ftp, and there is also a dce122.tar.bz2.torrent bittorrent running as well."
freedce (Score:3, Informative)
This is one _monster_ big deal for Free Software.
This is the code that allows big companies such as IBM, Fujitsu, Entegrity etc. to bid for £500m contracts. [theregister.co.uk]
We have FreeDCE [sf.net] already, which is the DCE 1.1 Reference implementation autoconf'd and updated...
Re:freedce (Score:1, Insightful)
Re:freedce (Score:2)
Re:freedce (Score:1, Informative)
He bought the $lashdot Bonus Pack©. That's a story plus a guaranteed 2nd post behind a non karma whoring first post (1st would be to obvious and a karma whore first post might drown it out. Sorry, Lindsy. ) The bonus pack only cost $50 more than the regular $lashvertisement.
Re:freedce (Score:3, Informative)
The article author claims:
"...Global File System (which is proprietary anyway, available from Redhat)..."
Except, GFS is NOT proprietary. Behold, the source code:
http://sources.redhat.com/cluster/gfs/
And by the way, as my first impression I think Advogato sucks if only because there is no obvious way to contact the author or reply to the article to point out this inaccuracy or anyone at the site to contact ab
Re:freedce (Score:2)
DFS, AFS, etc., Was: freedce (Score:2)
Indeed, this is a very interesting development. With an LGPL license for DFS, it's time to give the DCE descendent of AFS another look.
But we have AFS, too, and although OpenAFS is not GPL-compatible, its free software in a real sense, and more important, it has a living community of developers who've worked on the code stretching back into the 1980s.
I'm not as convinced now as I might have been 3 years ago that DCE is a better mousetrap than Rxgk is shaping up to be.
There will probably be crossov
Re:DFS, AFS, etc., Was: freedce (Score:2)
dfs is just far too good at what it offers to let it go piss down the toilet.
remember: dfs was the stuff that transarc got their teeth into _after_ they released afs, and so they had a few more years to hammer at an _already_ stunningly good bit of code.
Re:DFS, AFS, etc., Was: freedce (Score:2)
looks like somebody noticed.
Re:just DCE/RPC (Score:2)
this is _really_ different: 3.5 _MILLION_ lines of code, including CDS and DFS, under the LGPL.
Re:Pah! (Score:2)
DCE/RPC is to DCOM as
Corba's RPC mechanism is to CORBA.
i mention a bit about it in my advogato article: it's _very_ stupid that TOG didn't release DCE/RPC (and DCOM) a _lot_ earlier than this.
never mind....
Re:Pah! (Score:2)
if IBM hadn't stalled the release for four years, but, they're interested in making money: if there were major contracts they were still pulling in, there was no reason for them to hand it all over on a plate.
remember, they would have _just_ finished adding LDAP to their DCE 3.0 internal proprietary version.
now, of course, this code is end-of-lifecycle as far as they are concerned, and a large number of companies and universities are in deep doodoo unless the open source communi
open group still matters? (Score:1, Interesting)
Re:open group still matters? (Score:2)
plus, Corba is object-orientated, and its "counterpart" is DCOM (which uses DCE/RPC underneath). a lot of people make this mistake - seen it about five times on slashdot in the pa
Re:open group still matters? (Score:2)
Re:open group still matters? (Score:2)
that'd be funny: the SOAP specification references the DCE/RPC documentation as one of its sources
Re:open group still matters? (Score:2)
WTF? (Score:2, Funny)
But, I figured I'd be socially productive, RTFA and post an explanation myself.
Re:WTF? (Score:4, Funny)
Re:WTF? (Score:1, Redundant)
From wikipedia (Score:5, Informative)
Link here [wikipedia.org]
Re:From wikipedia (Score:2)
Until very recently with Macs, Apollo's distributed directory was unrivaled for ease integration of new nodes in the network. Plug it in, you're not only on the net, but you have the same account, device, filesystem, etc configuration as every other node on the network. Don't have a disk? Eh, we'll f
Re:WTF? (Score:2)
Re:WTF? (Score:2, Insightful)
I know I already replied. I'm doing it again.
Re:WTF? (Score:2)
Re: (Score:3, Interesting)
Re:WTF? (Score:3, Informative)
DCE did a "proper" job by using the available fields of kerberos for the correct - documented - purpose.
the use of CDS being largely irrelevant was recognised by TOG in 1999: you need to pay IBM stacks of $$$ to get the code _but_ it was reco
Re: (Score:3, Interesting)
The Open Group now known as the AbandonWare Group (Score:1, Funny)
Re:The Open Group now known as the AbandonWare Gro (Score:2)
I wouldn't recommend it to most people, as it's still low level enough to bog you down in the UI instead of the backend. But it's hardly "abandonware".
Open the code, but charge for documentation? (Score:2, Interesting)
Re:Open the code, but charge for documentation? (Score:2)
okay - last time i looked (1998) it was available online.
the reason why it's available for a charge is because it's a MASSIVE download.
the source code alone is 90mbytes, and TOG _belieevved_ in documentation.
Re:Open the code, but charge for documentation? (Score:2)
Re:Open the code, but charge for documentation? (Score:3, Informative)
Re:Open the code, but charge for documentation? (Score:4, Insightful)
Of course the code is open... unless you consider man pages acceptable documentation.
And last I knew, those O'Reilly books aren't free either.
Re: (Score:3, Informative)
My, how times have changed (Score:3, Interesting)
It is interesting to see the difference between the openess of the OSF and the openess of the open source movement [all that gnu software!] begin to blur.
I hope that exposure of the security code buried in DCE, especially where it uses kerberos, will help polinate other open source projects with improved security features.
Re:My, how times have changed (Score:1, Informative)
Re:My, how times have changed (Score:2)
now, of course, all that free software projects must do is to notify the US govt of what encryption is involved, where they can get it, and you're done. which is very sensible and realistic.
so now we can start adding kerberos back in - Luke Howard (www.padl.com) has already added GSSAPI as a FreeDCE plugin and that's actually better than going directly via k
Re:My, how times have changed (Score:2)
Didn't M$ steal this? (Score:2)
Re:Didn't M$ steal this? (Score:3, Informative)
Re:Didn't M$ steal this? (Score:2)
Re:Didn't M$ steal this? (Score:2)
They reverse engineered the spec, I think you mean. Kinda like what the SAMBA group did when you think about it, and they get a ton of props around here...
Comment removed (Score:4, Informative)
Re:Didn't M$ steal this? (Score:3, Interesting)
namely, that microsoft got hold of the BSD-like-licensed DCE 1.1 "reference" implementation so the "stripping of all security" was done by TOG not by microsoft.
MS, who had and still have someone from Apollo working for them, knew and knows how DCE/RPC works _in_side out, and so was able to sort stuff out for them.
MS _did_ have to add some stuff like "implicit handles" and MSRPC _does_ have the ability to do Unicode Strings (and bet
Re:Didn't M$ steal this? (Score:3, Interesting)
FreeDCE, however, has _two_ security plugins: GSS-API (thanks to luke howard), and NTLMSSP (code from samba tng which i wrote, based on my and paul ashton's "welcome to the samba domain" work in august 1997)
Re:Didn't M$ steal this? (Score:2)
That's not entirely true. DCOM is layered on DCE-RPC yes, but actually activating and programming a remote DCOM object is a lot more work than just using the RPC APIs. DCOM adds some kind of "object oriented"ness to it so you'd have to be able to understand OBJREFS and s
Re: (Score:2)
Re:Didn't M$ steal this? (Score:2)
Not exactly fair and square (Score:2)
DCE was used on a NASA project I was on. (Score:2)
Anyway... DCE was used to tie several servers together which are the core of the system. I found it very reliable and solid (and that was several years ago).
GJC
DCE, Microsoft and DCOM (Score:3, Interesting)
Microsoft's COM (also known as DCOM) sits on top of this RPC layer to implement a distributed component object model -- one of Microsoft's finest and most underrated inventions. It's also one of their most copied technologies -- KDE, GNOME, OpenOffice (UNO) and Mozilla (XPCOM) all implement very similar object models.
Of course, DCE RPC is also famous for the UUID [wikipedia.org] (aka GUID [wikipedia.org]) algorithm -- 128-bit identifiers whose uniqueness is mathematically guaranteed as long as the generator can access a network card with a unique MAC address.
Re:DCE, Microsoft and DCOM (Score:2)
This was before the split between Microsoft and IBM. SOM and COM are very similar...
Yet another "innovation" from Microsoft that was based upon suspiciously similar innovations from other companies...
Re:DCE, Microsoft and DCOM (Score:2)
I don't know the details, but I believe that at that time, Microsoft were still on IBM's team developing OS/2. Windows and OS/2 are very similar. Also, both SOM and COM were inspired by CORBA. And there are many differences; COM used DCE-RPC and added UUIDs to interfaces, for example, whereas SOM relied on simple names.
What these technologies had in common was that they implemented binary interface compatibility between components, in a way that seemed to be the wave o
Re:DCE, Microsoft and DCOM (Score:3, Interesting)
Microsoft's COM (also known as DCOM)
No, DCOM is distributed COM, not identical to COM, but a superset. COM itself is a component-object model that is a nice piece of work in my opinion.
COM is a binary, language independent standard for using services provided by objects without depending on the implementation.
Instead of direct linkage to functions, for example, clients must request access to interfaces, and only use the services if the request succeeds.
Interfaces amount to a C-Cstyle struct with func
Re:DCE, Microsoft and DCOM (Score:2)
In theory, yes; that'd be the case if we were talking about something like a standard. In reality, there's only a single implementation of COM, which today includes the distributed object support; it's all DCOM now.
Re:DCE, Microsoft and DCOM (Score:2)
In theory, yes; that'd be the case if we were talking about something like a standard. In reality, there's only a single implementation of COM, which today includes the distributed object support; it's all DCOM now.
Not true. The product I work on has it's own implementation of COM, but does not use DCOM at all. The standard parts of COM are well-published in books (e.g. the Don Box COM book, the Microsoft ATL book etc - both excellent),
Re:DCE, Microsoft and DCOM (Score:2)
This is very true; I'd go further and say if you want to experiment with OSes, want the result to be usable, but don't want to implement the boring but difficult to get right bits, you can't do better than OSkit. Check out Christopher Browne's Novel OS work page [cbbrowne.com] for leads to cool things.
Re:DCE, Microsoft and DCOM (Score:2)
guid = mac_address + padded_zeros;
Re:DCE, Microsoft and DCOM (Score:2)
Yeah, and what about all the other UUIDs generated on that host?
Re:DCE, Microsoft and DCOM (Score:2)
That gives you a single identifier. What do you do when you need another one?
Re:DCE, Microsoft and DCOM (Score:2)
So all the applications in your system goes through a shared generator which manages a persistent counter?
Do you fsync on every count? How do you guarantee the state of the on-disk counter?
How do you provide this generator to all the languages and platforms that need it, some of which can't realistically make calls to your C library?
How do you license your generator?
The DCE algorithm doesn't need state, and it can be implemented anywhere without interfering with anyone.
Re:DCE, Microsoft and DCOM (Score:2)
I've never programmed in RPC directly, but I do know that it has been a horrible nightmare in terms of security for both the MS and UNIX platforms for many years.
Its not something that brings a pleasant thought to my mind.
Microsoft's COM (also known as DCOM)
Maybe I'm wrong, but I thought there was a difference between the two. COM was Component Object Model while DCOM was Distributed COM (COM on another box).
Re:DCE, Microsoft and DCOM (Score:2)
You can't make an open ended statement like that and not provide an explaination.
DCE/RPC (which is what MSRPC basically is) provides integrity and confidentiality using the session key. If you don't properly check input and then yes you're going to have buffer overruns. If you want to program like that use Java.
Re:DCE, Microsoft and DCOM (Score:2)
I though it was common knowledge and I didn't want to beat a soar wound.
For MS try
For Solaris try
I'm not too familiar with MS products, but a few years back we had about 60 Solaris boxes broken into via an RPC exploit (fortunately not mine).
Re:working links if needed (Score:2)
Try this -- Solaris [google.com]
Preview exists for a reason, doh!
Re:DCE, Microsoft and DCOM (Score:2)
Still, trying to create well-behaving COM objects is always tricky, and sometimes they can give you massive fits. In addition, the DCOM procedures provide massive, and I mean massive security holes if you don't watch the default configurations carefully.
Re:DCE, Microsoft and DCOM (Score:2)
COM and DCOM are not the same thing: COM is a local component model, DCOM is a distributed layer on top of that.
And, no, this is not "Microsoft's invention", it is Microsoft's adaptation of
Re:Microsoft RPC != 'proper' RPC (Score:2)
it's been a long time (like almost a decade) but it's there.
i'm sorry you didn't have my email address when you needed it, i could have done with the extra work.
Re:Microsoft RPC != 'proper' RPC (Score:2)
I faced the same problem, but about 5 years ago. My solution was to use ONC (Sun) RPC instead of DCE. ONC RPC has been supported on Linux / Unix forever, and I found a port to Windows (from the original Sun code) that worked nicely.
Since then however, it looks like that port of
Re:DCE, Microsoft and DCOM (Score:2)
Re:DCE, Microsoft and DCOM (Score:2)
The MAC address is a single unique identifier. A UUID is a space of unique identifiers -- it's a product of the MAC address, the clock, a random seed, etc. You generate UUIDs; you can't generate new MAC addresses.
Re:DCE, Microsoft and DCOM (Score:2)
The mac address helps keep the number unique to the PC.
the date and time and some big random numbers help keep it unique of all the numbers generated by that PC
I beleieve newer algorithms are just pure random though.
Whats the birthday algorithm on 2^128? How many guids need generating to have a 50% chance that two are the same.
Left as an excercise for the karma-hungry
Sam
Re:DCE, Microsoft and DCOM (Score:2)
Microsoft is known to have released components with colliding UIDs.
Re:DCE, Microsoft and DCOM (Score:2)
Comment removed (Score:3, Informative)
Nice software, but...... (Score:2)
Re: (Score:2)
Re:Nice software, but...... (Score:3, Interesting)
and if it's added to FreeDCE, then DCE 1.2.2 gets it too - once DCE 1.2.2 has been autoconf'd and brought up-to-date like FreeDCE already is.
Re:Nice software, but...... (Score:2)
Is this an End of Life announcement? (Score:2)
i.e. Let's outsource support for this sucker! I mean, how excited am I supposed to get, in 2005, about a techmology that allows me to marshall/unmarshall data and call remote procedures over the 'net? Isn't that already being done (a lot) by the various CORBA and RPC stuff already running on my Linux box?
Re:Is this an End of Life announcement? (Score:2)
The relationship between DCE and Sun's RPC, I'm not sure. I -think- Sun's RPC is the RPC component of DCE broken out and modified to be stand-alone, making it the lightest-weight of the lot.
Re:Is this an End of Life announcement? (Score:2)
CORBA is to CORBA's underlying RPC mechanism.
DCE/RPC bears no relation to CORBA's RPC mechanism.
Sun's ONC/RPC bears no relation to DCE/RPC.
ONC/RPC uses something called XDR for its data representation;
DCE/RPC uses NDR (network data representation) which was designed by Apollo (who were acquired by HP)
Re:Is this an End of Life announcement? (Score:3, Funny)
Re:Is this an End of Life announcement? (Score:2)
I hate TLA's.
Seriously, thanks for clearing that up.
BREAKING NEWS! (Score:3, Funny)
Rumor has it that SwiM Motif may up the ante. Not to be outdone, the Transmeta Linux distribution is being resurrected. OS/2 Warp may follow. Stay tuned...
Not just the RPC (Score:2, Informative)
It's not just the DCE RPC that has been released, it's the whole schebang, including:
* The build environment (ODE)
* The vast documentation with specs
* Threads (Ugh!, Please don't use)
* RPC
* Directory services
* Security services
* Time sync
* File service (DFS) including the Episode file system.
* Test procedures
* The various administration tools
* The tools needed to make DCE applications.
The code is old, however and building this is not for the faint of heart, but there's lots of good stuf
Late? (Score:2)
I don't mean to sound like a troll, but what does DCE/DFS buy me now?
With kerberos, pam, ldap and NFSv4 it seems like alternatives are available. And the 90% of computer users in the enterprise needing authentication, directory service on Windows users are getting embraced by AD.
Plus, last time I remember using DCE/DFS about 7 or 8 years ago it was sloooooow.
Re:Ummm (Score:3, Funny)
Or in the same way that you drive on a parkway, and park in a driveway.
Re:Ummm (Score:5, Informative)
M$ from /www.dsps.net/History.html (Score:2)
Re:M$ from /www.dsps.net/History.html (Score:2)
Re:M$ from /www.dsps.net/History.html (Score:2)
Re:Ummm (Score:2)
This is completely wrong.
This days you can consider a mainframe open, because not only it can ran GNU/Linux but also it has a facility to run open systems programs, protocols etc. Other non-Unix systems do so, like Digital VMS.
Open systems are systems that implement open standards, that is, standards agreed upon by representative bodies like ISO specifying interfaces, protocols, file formats
Re:X-500 Server too (Score:2)
Re:Microsoft COM (Score:2)
Re:Microsoft DCOM (Score:2)
Re:Where's the LGPL? (Score:3, Informative)
Previously, the DCE source was only available under a traditional license. Making it available under a recognized open source license (LGPL) both increases the accessibility of DCE as an interoperability technology, and permits a broader community to work on the source to expand its features and keep it current.
Re:too late... (Score:2)