DCE Cell Administration

==========

    -- various cell administration tasks, grouped by....

    -- stuff specific to our environment

    -- Argus monitoring -- JF will probably have done by the
       time I give lectures

    -- For II, security master/ slave switching

    -- Typical problems and incongruities (like
       registry show -master and registry show -replica
       telling you things other than what you think they would)

    -- Web pages that may help (e.g.

http://www.software.ibm.com/sw-sell/besteam/studyguides/dss/a3u1smst/toc.htm

    which is really just start_dcedoc only on the Web)

    -- logs -- where they are and what they might tell you

====

Making an AIX box a DCE client

  mkdce -n u.washington.edu -s strunk -c strunk all_cl


====

Making /var/dce/security a separate filesystem.
/var is ~250 Mb, /var/dce/security is ~800Mb


====

Web page.  Fix it, and mention it during lecture.

==========

-- Servers on each  Primary/ secondary
   Why I'm not thinking we need to split up cds/ sec server so far
   Different fs for security stuff

   cds
   sec
   dts

-- Various tools

-- All about the production cell
   Mention bugs
   Go through history

Note that the below is how we'd want to make a new client on AIX

  mkdce -n u.washington.edu -s strunk -c strunk rpc cds_cl sec_cl dts_local


daemons hanging

  rmdce -o local sec_cl

/ux01/yonah/DCESuitcase


    rmdce all
    mkdce -n ucscell.u.washington.edu -s king -c king all_cl


rgy_edit=> ktl

lists keytab files

Also looks like rgy_edit functions will be subsumed into dcecp
commands.

    rgy_edit=> kta -p passwd_server
    Enter password:
    Re-enter password to verify:
    rgy_edit=> kta -p passwd_server -f /usr/local/etc/ucsktab
    Enter password:
    Re-enter password to verify:

    dcecp> principal show passwd_server
    {fullname {}}
    {uid 105}
    {uuid 00000069-7220-21cf-bb00-08005aa3060d}
    {alias no}
    {quota unlimited}
    {groups none acct-admin subsys/dce/sec-admin}





. Adding a user

  dcecp> user create -group /.../u.washington.edu/subsys/dce/sec-admin
  -uid 4143  -password ******* -organization /.../u.washington.edu/none
  -mypwd ******* yonah



Configuring master & slave  sec & cds server -- in redbook

To make changes, remove with

#white% rmdce -o [local|full] [client|server list]

need rpc to do anything else

dcecp> registry delete /.../u.washington.edu/subsys/dce/sec/white -force    

#white% rmdce -o local sec_srv 
   [-o local is assumed]

Enter password for DCE account cell_admin: 

#strunk% rgy_edit
Current site is: registry server at
/.../u.washington.edu/subsys/dce/sec/master 
rgy_edit=> domain principal
Domain changed to: principal
rgy_edit=> scope hosts
rgy_edit=> view
hosts/strunk/self                            102
hosts/strunk/cds-server                      103
hosts/strunk/gda                             109
hosts/saul8/self                             121
hosts/jason05/self                           123
hosts/jason04/self                           124
hosts/jason03/self                           125
hosts/jason02/self                           126
hosts/jason01/self                           127
hosts/niven/self                             128
hosts/white/self                             134
hosts/aesop11/self                           139
hosts/aesop12/self                           140
hosts/aesop05/self                           143
hosts/mailer18/self                          144
hosts/mailer17/self                          145
hosts/homer01/self                           147
hosts/homer02/self                           148
hosts/homer32/self                           149
hosts/homer33/self                           150
hosts/homer34/self                           151
hosts/homer35/self                           152
hosts/aesop07/self                           153
hosts/aesop09/self                           154
hosts/white/cds-server                       155
hosts/aesop10/self                           156
hosts/nineveh/self                           158
hosts/homer03/self                           189
hosts/homer05/self                           190
hosts/homer04/self                           191
hosts/homer06/self                           192
hosts/homer07/self                           193
hosts/saulfs01/self                          197
hosts/saulfs02/self                          198
hosts/homer08/self                           199
hosts/homer09/self                           200
hosts/homer10/self                           201
hosts/homer11/self                           203
hosts/homer13/self                           204
hosts/homer12/self                           205
hosts/homer15/self                           206
hosts/homer14/self                           207
hosts/homer17/self                           208
hosts/homer16/self                           210
hosts/homer19/self                           211
hosts/homer18/self                           212
hosts/homer25/self                           213
hosts/homer26/self                           214
hosts/homer21/self                           215
hosts/homer23/self                           216
hosts/homer24/self                           218
hosts/homer20/self                           219
hosts/homer22/self                           220
hosts/homer27/self                           221
hosts/homer28/self                           222
hosts/homer31/self                           223
hosts/homer29/self                           224
hosts/homer30/self                           225
rgy_edit=> 

rgy_edit :  ktl

  lists keytabs

#strunk% rgy_edit
Current site is: registry server at /.../u.washington.edu/subsys/dce/sec/master 
rgy_edit=> ktl
/.../u.washington.edu/hosts/strunk/self         1
/.../u.washington.edu/hosts/strunk/cds-server           1
/.../u.washington.edu/hosts/strunk/cds-server           2
/.../u.washington.edu/hosts/strunk/gda          1
/.../u.washington.edu/hosts/strunk/gda          2
rgy_edit=>

Security holes

   Root principal still has a password
   Having to type cell_admin password all of the time
   ssu & cell_admin not tied


    o   Run chpesite as a cron job, once a day, on every machine
        in the cell.  This resyncs all machines in the cell and
        keeps the cell up to date.





======
Friday 8/2
======

Note looking at a full view of an account gives a lot of info.

rgy_edit=> v yonah -f
yonah [none none]:*:4143:12:This is a test:/:/bin/ksh:
  created by: /.../ucscell.u.washington.edu/passwd_server 1996/03/08.21:02
  changed by: /.../ucscell.u.washington.edu/passwd_server 1996/05/08.13:37
  password is: valid, was last changed: 1996/05/08.13:37
  Account expiration date: none
  Account MAY be a server principal
  Account MAY be a client principal
  Account is: valid
  Account CAN NOT get post-dated certificates
  Account CAN NOT get forwardable certificates
  Certificates to this service account MAY NOT be issued via TGT authentication
  Account CAN NOT get renewable certificates
  Account CAN NOT get proxiable certificates
  Account CAN NOT have duplicate session keys
  Good since date: 1969/12/31.16:00
  Max certificate lifetime: default-policy
  Max renewable lifetime: default-policy

Right now the most important thing we do is create accounts &
keep passwords up-to-date.  As of 12/2/96, we have 


cdscp dump clerk cache > /tmp/cdscache.out

and look at the output, esp the end.  (Look in the Usenet posting.)

Removing a DCE Host from a Cell

  host unconfigure operation deletes all objects, directories,
  and links from the /.:/hosts/hostname CDS directory including
  the directory itself.  It also deletes all principal names
  beginning with hosts/hostname/ which, in turn, removes all
  accounts with the same name.  Finally, it removes all local
  configuration files and stops all running DCE processes ending
  with the DCE daemon (dced).

	 dcecp> host unconfigure /.:/hosts/aesop01

  I haven't done it this way -- usually use rmdce -o xx ....


    #king% rmdce -o admin -h saul8 all_cl

WAS doing

  mkdce -n u.washington.edu -s strunk -c strunk all_cl

before I had to not configure dts.
 
  Now I specify which clients to make for the client hosts.
  (rpc is a given, even if I don't specify it it will config it.)

  1)  Updating strunk requires some fancy working-around as
      strunk is detached from the rest of the world.  I'd need
      to mount /aix4 to do so, which I didn't do.


====

Logs & Errors

dcecp -c errtext hex-string

will give me the text for this error.  For example,

#strunk% dcecp -c errtext 0x141290b3
Cannot write to specified key table


There are many logs -- this is not an exhaustive list.

DU

  /opt/dce/share/include/dce/audit_log.h
  /opt/dcelocal/dcesetup.log

There is a utility on DU called "svcdumplog" which dumps binary logs
to readable format.  I have not used it.  There are many logs on DU
in the /opt/dcelocal, /opt/dcelocal/var, /usr/opt/DCE200, and
/opt/dce directories that I have not looked at. 

AIX

  /var/dce/adm/directory/cds/cdsadv/cdsadv.log  
    e.g.
    c 585 0x20021d50
    Routine rpc_binding_set_auth_info(3rpc) failed : status = 387063931.
    1996-10-09-20:36:15.021-07:00I9.364 cdsclerk(4272) ERROR cds
    general clerk_bind.

  /var/dce/dced/dced.log 
    e.g.
    1996-11-06-21:20:52.878-08:00I0.128 secd FATAL sec rs_rsdb
    balanced_trees.c 221 0x2004b500 unable to allocate memory.
    
  /var/dce/svc/fatal.log
  /var/dce/svc/error.log
  /var/dce/svc/warning.log
  /var/dce/security/adm/secd/secd.log
  /var/dce/security/adm/secd/dump/secd.log
  /var/dce/security/rgy_data/update_log
  /var/dce/directory/cds/adm/cdsd/cdsd.log
  /var/dce/directory/cds/adm/gdad/gdad.log
  /var/dce/directory/cds/u.washington.edu#strunk_ch.tlog0000000142
  /opt/dcelocal/bin/svcdumplog

Logs:  There are many, this is not an exhaustive list.

   (from man pages)
    o   Run chpesite as a cron job, once a day, on every machine
        in the cell.  This resyncs all machines in the cell and
        keeps the cell up to date.

When in doubt

  -- IBM redbooks, esp _Administering IBM DCE and DFS V 2.1_
  -- Keep up with bug fixes for RS6K's
  -- Call IBM
  -- Call me

  #strunk% lslpp -h dce\* |less

  #strunk% ls -l `find /var/dce -name core`


in crontab

Am running  'rmxcred' as cron job every four hours on strunk and
white.  We should be running this everywhere in the cell --
clients too.  Has not been an issue on the client hosts -- YET.

  run this as cron job.  3 cred files created for each dce_login,
    never removed.

As noted in

  http://neruda.cac.washington.edu/ast/lectures/dce_overview.html

  there are lots of places to get help.  One I didn't mention (then)
  were the IBM redbooks, in particular

  Administering IBM DCE version 2.1 For AIX and OS/2 Clients

  and secondarily
  
  Understanding OSF DCE 1.1 For AIX and OS/2


#strunk% dce.clean
#strunk% rc.dce

  Need to make sure that fs are big enough

You can think that you've removed an object, but some command --
either on servers or on clients -- will indicate otherwise.  Things
get cached!

  dcecp> rpcgroup list /.:/sec 
  /.../u.washington.edu/subsys/dce/sec/master
  /.../u.washington.edu/subsys/dce/sec/white

and a removal, using 

  dcecp> rpcgroup remove /.:/sec -member /.:/subsys/dce/sec/white  

solved the problem.

Here are previous commands I tried:
    cdsli -cworld | grep white
    rmdce -o admin -h white -a cell_admin all_cl
    rpccp show mapping | grep 140.142.12.169
    rpccp show mapping | grep 198.48.74.46
    cdscp list clearinghouse /.:/\*


  rmdce -o full all_cl

  
/var/dce/security.  792 Mb on strunk, 816 on white.  


  According to IBM (Hemanth/ William):  we need to set up a
  static route to strunk for everything to work.  Not good
  enough to be able to talk with strunkb.  Perhaps it takes
  turns once it's configured (configured to strunkb, but strunkb
  knows about strunk).  I asked him to pass it on, he passed it
  to level 3 people.

  S/b able to ping ethernet on master sec server

  Need to have a static route on this machine pointing to
  ethernet interface.  No way this whole setup can work if
  I can't point to both 

  Need to establish a default route from 
  unless using rpc_unsupported variable.

  Should be able to ping both network interfaces.

  o       /.:/hosts/strunk/self
  o
  #strunk% cdscp show obj /.:/hosts/strunk/cds-server

  #strunk% cdscp show obj /.:/hosts/strunk/cds-server

                        SHOW
                      OBJECT
/.../u.washington.edu/hosts/strunk/cds-server
                          AT   1996-11-14-11:26:10
            RPC_ClassVersion = 0100
             RPC_ObjectUUIDs = 40e5f2fab858ca11a04a08002b12a70d
                     CDS_CTS = 1996-07-08-18:39:29.486823100/10-00-5a-fa-6b-27
                     CDS_UTS = 1996-10-18-01:07:18.262726100/10-00-5a-fa-6b-27
                   CDS_Class = RPC_Server
            CDS_ClassVersion = 1.0
                  CDS_Towers = :
                       Tower = ncacn_ip_tcp:140.142.12.136[]

  Note that a way to set up static routes would be to use sappho --
  which actually can be set up with

    route add -host strunk sappho1b

  at the Unix prompt on the aesops (or anywhere else with no
  front door).  [Ken thought that we couldn't do a static route
  between aesop0x and strunk because they're on different
  subnets.  ???]



        18:00   Yonah   saulfs0[12]
        Ken noticed that saulfs01's time was flopping around.  For
        starters, saulfs01 was configured to be a dts clerk rather
        than a dts local server.  In the process of trying to remedy
        this, noticed that DCE thought that saulfs01 was saulfs02.
        Hm.  Unconfigured saulfs01 completely from the cell (stopped
        daemons, removed temporary local DCE databases and configuration
        files, removed permanent local DCE databases and configuration
        files, unconfigured from the cell_admin's point of view from
        strunk).  Attempted to reconfigure.

        In the process of attempting to reconfigure, dcesetup hung.
        After perusal of the dcesetup utility (a 10,000 line shell 
        script), discovered that part of the setup does a "rgy_edit 
        view" on the namespace.  Feasable for 100 people, doable for 
        1000, but stupid for 50,000.  Modified the script, which 
        is in /opt/dcelocal/bin/dcesetup (original is in 
        /opt/dcelocal/bin/dcesetup.orig).  Am accomplishing the same 
        need with "dcecp host catalog".  "Our" /opt/dcelocal/bin/dcesetup
        should probably be somewhere in tulsa.

        Reconfigured saulfs02, which had other problems.
        Reconfigured both saulfs01 and saulfs02 as dts local servers.


Get picture drawn -- send to Wm -- could go through L3 --

rpc_unsupported env vars -- could keep dce entirely w/in a
particular adapter.  Could free up a particular

self entry stored in cds stored in local hostname of dce -- gets
exported to /:/fsjunction for fldb??

Will always preference the read-only.

PMR 7987x branch 550 (ch5907) -- went to development team.  Comment
Ran out of paging space

see if hit a page space condition occurred

look in errpt & see if paging space error at the same time that
core was dumped.


Configured homer08--homer26 as dce client hosts.  At first, tried

  mkdce -n u.washington.edu -s strunk -c strunk rpc cds_cl sec_cl dts_local

at which I discovered that dts was hanging, everywhere.  Talked
with William Wells at IBM.  (ci4352)  He said that the servers
were hung up trying to talk with each other -- in a deadlock
condition.  Discussion about whether we should be running dts
or not, considering that we're using clockd.  Wm said: "The
requirement is that system time be consistent throughout the
cell.  How it's done is inconsequential."  As long as clockd is
doing it, no problem.  If we want to use dtsd, then we'll need
to have at least 3 servers, and take clockd off those servers. 
*Should* make a bunch of these clients.

I unconfigured dts_cl and dts_local everywhere I could in
u.washington.edu.

Configured homer08--26 with

  mkdce -n u.washington.edu -s strunk -c strunk rpc cds_cl sec_cl 

Things appeared funny on saulfs01/ saulfs02.  Also, is it really
ok with Digital to not run dts?  Called Digital about wanting to
unhook dts.  Seq # is c961125-6901.


========
11/26/96	Tuesday
========

Spoke with Digital (Royal).  To unhook dts, first I needed to
convert the systems from being local dts service providers to
being dts clients, then manually edit /opt/dcelocal/dce_services.db
and remove the "dts client" line.

Easier said than done -- the conversion from dts local server to
dts client was difficult (attempted to do this through
dcesetup).  On saulfs01 (which had somehow created a second
cdsclerk which would die with a kill -9 but not before forking
another cdsclerk) I had to kill all of the dce-related daemons
and then restart them all before being able to unconfigure dts
in the manner described above.  Also removed saulfs0[12] from a
cell_admin standpoint from strunk. 

  rmdce -o admin -h saulfs01 dce_cl OR 
  rmdce -o admin -h saulfs01 dce_local 

for each of saulfs0[12]

Caching is curious, though -- the cds still thinks that
saulfs0[12] are local dts providers.  (This also happened
yesterday with the hosts I unconfigured; by today cds knew they
were gone when I queried from any host except the Digital Unix
systems.)


===

One:  cell show on DU systems
shows me lots and lots of dts servers, all of which I removed
yesterday or Monday.  (Caching problem?)  Two:  dcecp -c dts catalog
shows saulfs01 and saulfs02 as dts providers from anywhere I 
run the command.
Spoke with Royal and a different guy on Wednesday.  Annoying --
other guy tried to blow me off.  Late Weds Royal left message --
still looking into cell show, but caching:

  dts show is in

To get saulfs0[12] out of dts catalog:

dcecp> rpcprofile show /.:/lan-profile
{{019ee420-682d-11c9-a607-08002b0dea7a 1.0}
/.../u.washington.edu/hosts/saulfs02/dts-entity 0 {Time Server entry}}
{{019ee420-682d-11c9-a607-08002b0dea7a 1.0}
/.../u.washington.edu/hosts/saulfs01/dts-entity 0 {Time Server entry}}

dcecp> rpcprofile remove /.:/lan-profile -member
/.../u.washington.edu/hosts/sau
lfs02/dts-entity -interface {019ee420-682d-11c9-a607-08002b0dea7a 1.0}

dcecp> rpcprofile remove /.:/lan-profile -member
/.../u.washington.edu/hosts/sau
lfs01/dts-entity -interface {019ee420-682d-11c9-a607-08002b0dea7a 1.0}

About cell show:

On strunk, even though a cell show doesn't show dts servers,

dcecp> dir list /.:/hosts/saulfs01
/.../u.washington.edu/hosts/saulfs01/cds-clerk
/.../u.washington.edu/hosts/saulfs01/config
/.../u.washington.edu/hosts/saulfs01/dcesx_entry
/.../u.washington.edu/hosts/saulfs01/dcesx_group
/.../u.washington.edu/hosts/saulfs01/dcesx_profile
/.../u.washington.edu/hosts/saulfs01/dts-entity
/.../u.washington.edu/hosts/saulfs01/profile
/.../u.washington.edu/hosts/saulfs01/self

which includes the dts-entity.


==========

Logs


==========


Making a DU 4.0 box a DCE client

/usr/sbin/dcesetup


                     ***  DCE Setup Main Menu  ***
                         Version V2.0 (Rev. 514)

 --->   1)  Configure         Configure DCE services on this system
        2)  Show              Show DCE configuration and active daemons
        3)  Stop              Terminate all active DCE daemons 
        4)  Start             Start all DCE daemons 
        5)  Restart           Terminate and restart all DCE daemons
        6)  Clean             Terminate all active DCE daemons and remove
                              all temporary local DCE databases 
        7)  Clobber           Terminate all active DCE daemons and remove
                              all permanent local DCE databases
        8)  CVP               Run Configuration Verification Program
        9)  Version           Show DCE Version number 
        X)  Exit

                  ***  Configuration Choice Menu  ***

 --->   1) Configure this system as a DCE Client
        2) Create a new DCE cell
        3) Add Master CDS Server
        4) Configure DCE Distributed File Service (DFS)
        5) Modify DCE cell configuration
        R) Return to previous menu

    Shutting down DCE services

    DCE services stopped

    Removing temporary local DCE databases and configuration files

    Removing permanent local DCE databases and configuration files

    Starting client configuration
        Initializing dced (dced)...
        Starting dced (dced)...

Would you like to search the LAN for known cells? (y/n) [y] : n

Please enter the name of your DCE cell : u.washington.edu

Please enter your DCE hostname [saulfs01]: 

What is the hostname of the Master CDS Server for this cell []: strunk.u.washington.edu

Can saulfs01 broadcast to strunk.u.washington.edu? (y/n/?) [y]: y

        Stopping dced...
        Initializing dced (dced)...
        Starting dced (dced)...
        Starting CDS advertiser daemon (cdsadv)...
        Testing access to CDS server (please wait) .

        Attempting to locate security server
        Found security server
        Creating /opt/dcelocal/etc/security/pe_site file
        Checking local system time
        Looking for DTS servers in the LAN profile
        Found DTS server

    The local system time is: Fri Nov 15 15:14:24 1996

Is this time correct?  (y/n): y

Do you need the Distributed Time Service? (y/n/?) [y]: y

Do you want to enable DCE SIA? (y/n/?) [n]: n


        Stopping cdsadv...

This operation requires that you be authenticated as a member
of the sec-admin group.  Please login.

    Enter Principal Name: cell_admin
    Password:  

    Configuring security client
        Creating /krb5/krb.conf file
        Adding kerberos5 entry to /etc/services
        Creating ktab entry for client

        Stopping dced...
        Initializing dced (dced)...
        Starting dced (dced)...
        Starting sec_client service (please wait) .

    This machine is now a security client.

    Configuring CDS client
        Creating the cds.conf file
        Starting CDS advertiser daemon (cdsadv)...
        Testing access to CDS server (please wait) .
        Creating hosts/saulfs01 objects in name space

    This machine is now a CDS client.
        Stopping sec_client service...
        Starting sec_client service (please wait) .
        Modifying acls on /.:/hosts/saulfs01/config
            secval
            xattrschema
            srvrexec
            keytab
            keytab/self
            hostdata
            hostdata/dce_cf.db
            hostdata/cell_name
            hostdata/pe_site
            hostdata/cds_attributes
            hostdata/cds_globalnames
            hostdata/host_name
            hostdata/cell_aliases
            hostdata/post_processors
            hostdata/svc_routing
            hostdata/cds.conf
            hostdata/passwd_override
            hostdata/group_override
            hostdata/krb.conf
            srvrconf



    Configuring DTS daemon as client (dtsd)
        Starting DTS daemon (dtsd)...
        Waiting for DTS daemon to synchronize (please wait) ......

    This machine is now a DTS clerk.


Do you want to run the DCE Configuration Verification Program? (y/n/?)
[y]: y

    Executing Digital DCE V2.0 (Rev. 514) for Digital UNIX CVP (please wait)
    Copyright (c) Digital Equipment Corporation. 1996. All Rights Reserved.
    
    Verifying.


-->  Now need to edit 



====

Unconfiguring a DU box as a DCE client -- 2 parts (possibly
could do as one, but it's not straightforward):

1)

#strunk% rmdce -o admin -h saulfs01 all_cl

Enter password for DCE account cell_admin: 

Unconfiguring DTS Clerk (dts_cl) for 
  DCE host saulfs01 ...
DTS Clerk (dts_cl) unconfigured successfully for 
  DCE host saulfs01

Unconfiguring CDS Clerk (cds_cl) for 
  DCE host saulfs01 ...
CDS Clerk (cds_cl) unconfigured successfully for 
  DCE host saulfs01

Unconfiguring Security Client (sec_cl) for 
  DCE host saulfs01 ...
Security Client (sec_cl) unconfigured successfully for 
  DCE host saulfs01

Note: If DCE host saulfs01 has a DFS client
  (dfs_cl) configured, the DFS client will be unuseable until 
  the host has been reconfigured as a DCE client.

2)

In dcesetup on DU system, choose:

        7)  Clobber           Terminate all active DCE daemons and remove
                              all permanent local DCE databases
DU:

    /opt/dcelocal/dcesetup.log

I suspect DU's dcesetup to be buggy.

==========


Also DCESuitcase, other toolkits around.  Look at mail, Eliot
sent some info around.

==========

Frequently run commands

dcecp

  host catalog
  host show


cdsli -cworld

===
Go through dce.notes for frequently used/ useful commands.
===



Look at all red books and my notes from them.


Note that some of the AIX hosts (esp the homers) don't have dce as a
choice under 

/etc/dce/rc.dce 'all'

Sometimes you actually do have to unconfigure various pieces
separately, e.g.
 
  #clienthost%  rmdce -o local  dts_local
  #anycellhost%  rmdce -o admin -h white dts_local

This will do what a rmdce -o full dts_local on clienthost itself
would do -- but it hung, and the above separate commands
worked.

Sometimes things will hang for no obvious reason.

Sometimes caching will result in inaccurate reporting of servers
in the cds:

(at the same time)

#saulfs02% dcecp
  dcecp> cell show
{secservers
 /.../u.washington.edu/subsys/dce/sec/white
 /.../u.washington.edu/subsys/dce/sec/master}
{cdsservers 
 /.../u.washington.edu/hosts/strunk
 /.../u.washington.edu/hosts/white}
{dtsservers 
 /.../u.washington.edu/hosts/homer32
 /.../u.washington.edu/hosts/homer33
 /.../u.washington.edu/hosts/homer34
 /.../u.washington.edu/hosts/homer35
 /.../u.washington.edu/hosts/jason01
 /.../u.washington.edu/hosts/jason02
 /.../u.washington.edu/hosts/jason03
 /.../u.washington.edu/hosts/jason04
.
.
.


#white% dcecp
dcecp> cell show
{secservers
 /.../u.washington.edu/subsys/dce/sec/white
 /.../u.washington.edu/subsys/dce/sec/master}
{cdsservers
 /.../u.washington.edu/hosts/strunk
 /.../u.washington.edu/hosts/white}
{dtsservers 
 /.../u.washington.edu/hosts/saulfs02/dts-entity
 /.../u.washington.edu/hosts/saulfs01/dts-entity}
{hosts
 /.../u.washington.edu/hosts/aesop05


when does saulfs01 know that's not true????  ever???