Tru64 UNIX Operating System Version 5.0A

SPD 70.70.02

DESCRIPTION

The Compaq Tru64[TM] UNIX Operating System is a 64-bit advanced kernel architecture based on Carnegie-Mellon University’s Mach V2.5 kernel design, with components from Berkeley Software Distribution (BSD) 4.3 and 4.4, UNIX System V, and other sources. Tru64 UNIX is the Compaq Computer Corporation implementation of The Open Group’s OSF/1 R1.0, R1.1, and R1.2 technology, and the Motif graphical user interface and programming environment.

Tru64 UNIX provides symmetric multiprocessing (SMP), real-time support, and numerous features to assist application programmers in developing applications that use shared libraries, multithread support, and memory-mapped files. The full features of the X Window System, Version 11, Release 6.3 (X11R6.3) from The Open Group are supported.

Tru64 UNIX complies with other standards and industry specifications, including the The Open Group XPG4 and XTI, POSIX, FIPS, and System V Interface Definition (SVID). By providing support for SVID, Tru64 UNIX supports System V applications. The Tru64 UNIX Operating System is compatible with Berkeley 4.3 programming interfaces. Tru64 UNIX conforms to The Open Group Application Environment Specification (AES), which specifies an interface for developing portable applications that run on a variety of hardware platforms.

SYSTEM MANAGEMENT

Tru64 UNIX System Management (SysMan) includes an easy to use suite of tools for installing, configuring, and managing a Tru64 UNIX system. SysMan provides centralized administration (the sysman command) for all system management tasks. Tru64 UNIX system management provides a set of features for the automation of system installations and configurations.

The SysMan tools and applications provide several user interfaces that allow administrators to manage a Tru64 UNIX system from anywhere:

• A Java based interface for managing over the Web or from a PC

• A graphical interface based on X windows

• A Curses interface for character-cell environments

• A command-line interface for scripting, automation, and for auditing system configurations

SysMan also includes a comprehensive event management mechanism for posting, subscribing, and viewing all system events, including hardware and software.

Installation

Tru64 UNIX can be installed from either a CD-ROM or a remote installation server. Administrators have a choice of full, update, and cloned installations. Installation Services are available for those customers who would like an experienced Compaq Software Specialist to install the software.

Full Installation

The full installation procedure installs Tru64 UNIX onto any supported Alpha system, and uses a wizard-like interface to walk administrators through the required steps. Full installations may repartition the system drives and remove all existing information. During installation, the default file system is the Advanced File System (AdvFS); however, administrators can choose the UNIX file system, if preferred. Administrators can configure the Tru64 UNIX system disks for Logical Storage Manager (LSM) during the initial system installation. Administrators can also select and install Worldwide Language Support software during the initial installation.

Update Installation

The update installation procedure updates the operating system from Tru64 UNIX Version 4.0F or Version 5.0 to Version 5.0A, while preserving appropriate system files and existing user-customized files. The Installation Guide shows the successive update paths to reach if a system is running a version of the operating system other than Version 4.0F or 5.0.

Updating Worldwide Language Support (WLS) software is done automatically during an update installation of the base operating system. It is not necessary to remove WLS software before updating the operating system or to update WLS software as a separate task.

Administrators can invoke the update installation with the optional -u flag to run in an unattended mode. Unattended means that barring any problems with the update, no user interaction is required. The only exception to this is the switching of CD-ROMs if WLS software is being updated. The -u flag builds a kernel with all kernel components, but does not provide the chance to archive obsolete files.

At the beginning of the update installation process, a Tru64 UNIX system will look for the following:

• Layered products that prevent the update from continuing

• Layered products that should be reinstalled after the update

• Fatal and nonfatal file system type conflicts

• Available disk space

System Cloning

Cloning lets administrators take a snapshot of a fully installed and configured system. Later, administrators can automatically install and configure other systems without the need to go through the set of installation and configuration steps. After a system’s configuration has been saved, administrators can apply it manually or automatically to other systems at any time.

System cloning, combined with user-defined scripts, can execute customized scripts during different phases of the installation process, so that administrators can run a completely unattended installation and configuration of a system. Administrators can use cloning for repetitive installations and configurations on multiple systems.

Configuration

To do an initial system configuration after a full installation, SysMan automatically runs Quick Setup the first time administrators log in. Quick Setup determines the configuration utilities that are right for a system, then uses a wizard-like interface to help administrators set up client systems. Administrators can use the resulting system "as is" or customize it using settings from the full-featured configuration applications. Quick Setup is also available from the System Setup menu.

Bootable Tape

Tru64 UNIX supports the Bootable Tape application to create and recover a disk image from a system, so that administrators can restore a system from a directly attached tape device.

System Management Menu (SysMan)

The SysMan Menu provides a framework to easily execute system management tasks. Administrators have a choice of interfaces, including:

• X11-capable display

• Personal computer running Windows 95, Windows 98, or Windows NT

• Character-cell terminal

System Management Station (SMS)

The SysMan Station provides a graphical representation of the system and enables administrators to manage the system from a personal computer. The SysMan Station is a Java tool that is fully integrated with Compaq TruCluster[TM] Server Version 5.0A. SMS allows administrators to remotely manage systems from anywhere: PCs clients, UNIX workstations, or any Alpha system.

The Event Manager

Event Manager provides a centralized means of gathering, distributing, storing, and reviewing event information, regardless of how the events are posted. Event Manager makes event information more accessible and provides a flexible and adaptable event infrastructure. Event Manager’s Application Programming Interface enables any third-party or customer-developed applications to be customized to take advantage of this system data.

Monitoring and Tuning

Tru64 UNIX provides the following monitoring and tuning capabilities:

• Kernel Tuner displays and changes parameters of the kernel subsystem.

• Class Scheduler allows the administrator to prioritize jobs and tasks.

• Process Tuner displays, monitors, and manages system processes. A number of sort and filter options are provided to format the information display.

• Environmental Monitoring monitors the thermal, fan, and redundant power supply of Alpha systems that have prerequisite hardware sensor support. The functionality sets user-defined scripts, temperature levels, collection rate, and shutdown grace period, and can start or stop the environmental monitoring state.

• Collect is a lightweight, highly flexible performance collector. Collect can run continuously 7x24 and manage its own logs. For more information, see the Collect reference page.

Compaq Insight Manager (CIMXE)

Tru64 UNIX provides Web-Based Enterprise Management (WBEM) capabilities through integrating the Compaq Insight Manager Agents, insight_manager(5). Insight Manager enables Web-based device monitoring and fault management of local and remote system hardware and software resources. Administrators can access features from any browser using the Compaq dedicated 2301 HTTP port.

Compaq Insight Manager for Tru64 UNIX includes SNMP-based subagents and WBEM capabilities for presenting SNMP data through any Web browser. The SNMP subagents supply a rich set of Compaq Enterprise MIBs that provide hardware information, status, and statistics of CPU and memory boards, I/O devices, SCSI-based storage devices, Network Interface Cards, and Environmental devices, such as temperature sensors, fans, and power supplies.

Administrators can access the Tru64 UNIX System Management Home Page, System Management Menu, SysMan Station, and the UniCensus Configuration reports easily from any browser using the Compaq dedicated 2301 HTTP port.

Storage Management

Tru64 UNIX Logical Storage Manager (LSM) is an integrated host-based solution for data storage management. Basic LSM functionality, including disk spanning and concatenation, is provided with the base operating system free of charge. Additional features, such as disk striping, mirroring, and a graphical user interface, are available with a separate license. LSM is RAID Advisory Board (RAB) certified for RAID Levels 0 and 1, 0 +1 and 5. See the LAYERED PRODUCTS section of this SPD and the LSM SPD 51.24.xx for more information.

NetWorker provides automated backup and recovery of files on a local system. This SingleServer version is licensed free of charge with Tru64 UNIX and provides automated backup and recovery of the directly attached storage device. Users can purchase the full NetWorker product from Legato Systems, Inc. See the LAYERED PRODUCTS section of this SPD for more information.

Service Tools

Tru64 UNIX provides graphical presentation of the following commands:

• Iostat command (I/O statistics)

• netstat command (network statistics)

• vmstat command (virtual memory statistics)

• who command

• Compaq DECevent is supported using the dia utility, which provides error reporting and binary-to-text translation capabilities. DECevent provides system-directed diagnostic capability for the Compaq AlphaServer[TM] 8200 and 8400 EV6 platforms, the AlphaServer GS60, and the AlphaServer GS140.

• Compaq Analyze is a rules-based hardware fault management diagnostic tool (on selected platforms) that provides error event analysis and translation. The multi-event correlation analysis feature provides the capability to analyze events stored in the system’s event log file. A graphical user interface enables the user to set program and configuration parameters and to review event information.

• UniCensus is a tool used to collect and archive system configuration information. UniCensus uses sys_check to produce an HTML report showing system configuration information, revision levels, storage subsystem configuration, and other information. UniCensus is the collector used by the Compaq Services tool called RCM (Revision and Configuration Management). UniCensus can be configured to transport system configuration information to the RCM server in Compaq Services. It can also be configured to run at system reboot.

• sys_check is a data gathering and reporting tool that gives the current state of a system, including configuration information, microcode information, and Tru64 UNIX parameter settings.

FILE SYSTEMS

The Tru64 UNIX file system architecture is based on the OSF/1 Virtual File System (VFS,) which is based on the Berkeley 4.3 Reno Virtual File System. VFS provides an interface into files regardless of the file system in which the files reside.

Tru64 UNIX supports the file system types described in this section.

Advanced File System (AdvFS)

The Advanced File System is the Compaq journaled, local file system that provides higher availability and greater flexibility than traditional UNIX file systems. AdvFS files belong to filesets (equivalent to traditional file systems) that share a single storage pool called a file domain. Administrators can resize file domains dynamically to allocate or deallocate storage while the system is running, and to set quotas for users, groups, and filesets. Quotas can have hard and soft limits, which specify a period of time that a quota can be exceeded.

Using transaction journaling, AdvFS provides increased file system integrity and recovers file domains in seconds rather than hours after an unexpected restart. The AdvFS defragment utility reduces the number of file extents in a file domain by making files more contiguous, thus improving the read/write performance because less I/O operations are required to access a fragmented file. AdvFS also supports direct I/O, which allows applications to avoid the unified buffer cache (UBC), thus achieving near raw disk performance.

The AdvFS /, /usr, and /var filesets are configured during installation. The system has generous configuration capabilities. Administrators can mount 232-1 filesets and file domains.

A file domain may contain up to 256 volumes with a AdvFS Utilities license. See the Configuration and Tuning guide for volumes per domain, file domain, and fileset recommendations.

• The maximum volume size is 1 TB-512 K.

• The maximum number of files in a fileset is 231. (This number is limited by the length of the tag that is used to uniquely identify a file in a fileset.)

• The maximum size of an AdvFS file and fileset is 16 TB - 512 K (213 * 232), with an 8 K page size and a 31-bit page number.

The disk-structure analysis commands allow the system administrator to examine the low-level structures of files, filesets, and file domains. The verify utility validates domains and can fix a set of known disk corruptions. The salvage utility is useful when, due to hardware or software problems, disk metadata has become corrupt. It recovers the noncorrupted files from the file domains to disk or to tape.

The right to use the Advanced File System is granted by the Tru64 UNIX Operating System license.

AdvFS Utilities is a separately licensed layered product that expands the capabilities of AdvFS as follows:

• Adding more than one volume to a file domain.

• Cloning to perform online backups of active files by making a read-only copy (clone) of an active fileset.

• Performance tuning, such as striping files across multiple volumes to improve read/write performance, balancing to even out the percentage of free space among the volumes of a multivolume file domain, and migration to optimize disk usage.

• Creating a trashcan directory to store files that are deleted.

UNIX File System (UFS)

UFS is compatible with the Berkeley 4.3 Tahoe release. Tru64 UNIX supports up to 2,147,483,647 UNIX File System and Memory File System (MFS) mounts. The max-ufs-mounts attribute controls the maximum number of UFS and MFS mounts. The default value is 1000.

Network File System (NFS)

Tru64 UNIX NFS V2 allows transparent file access over TCP/IP networks. The Network Information System (NIS), formerly Yellow Pages (YP), is provided for centralized system management of files. The automounter service automatically mounts and unmounts NFS file systems. The NFS locking service allows advisory and record locks to be used with remotely mounted files.

Tru64 UNIX provides an NFS V3 server and client protocol implementation in addition to V2. NFS V3 includes 64-bit support for file access, exclusive create semantics, negotiable transfer sizes, safe asynchronous writes, added support for access checking, and other changes designed to increase efficiency and performance. NFS file systems can use either the UDP or TCP transport protocols.

Network Lock Manager (NLM) V4 includes support for files larger than 2 GB. Support for additional over-the-wire error code is also provided. NLM V3 is supported for NFS V2 compatibility.

V2 PC-NFS server support is provided to enable connectivity from PC-NFS V5.1a, 5.1, 4.0, and 3.5 clients.

Memory File System (MFS)

The Tru64 UNIX MFS is a memory-based UFS. The MFS has the same file system structure as the UFS, but resides in virtual memory. No permanent file structures or data are written to disk, so the contents of an MFS file system are lost on reboot, unmount, or power failure. An MFS is useful for temporary files or for read-only files that are loaded into it after it is created.

ISO 9660 Compact Disk File System (CDFS)

The Tru64 UNIX implementation of CDFS is based on ISO 9660, a standard for a volume and file structure for the interchange of information using CD-ROM. Tru64 UNIX CDFS is based on the following levels of ISO 9660:

• Level 2 of Interchange

• Level 1 of Implementation, which enables the user to mount single-volume CD-ROMs that are formatted in compliance with ISO 9660 as a local file system

• List and examine files using standard UNIX utilities and programs

• Read files and directories using the standard POSIX system interface

• NFS export mounted ISO 9660 file systems

• Support the High Sierra Group extensions that provide compatibility with older-format CD-ROMs

• File owner, file group, file permissions

• Additional file types (symbolic links, device special files, named pipes)

• setuid, setgid, and sticky bits

• Hard link counts

• POSIX file names (mixed case names, unstructured names, and longer names than ISO-9660:1988 allows)

• Deep directory hierarchies (greater than eight levels)

• File time stamps

X/Open Preliminary Specification (1991) CD-ROM Support Component (XCDR)

XCDR extensions allow users to examine selected ISO 9660 attributes through defined utilities and shared libraries. A system administrator can substitute different file protections, owners, and file names for CD-ROM files.

CDFS supports the organization of multiple sessions on one CD-ROM volume. The maximum number of CDFS mounts is 512. Note that the contents of all sessions are available as one file system and are not separately available. Users can access DVD disks using the CDFS file system.

File-on-File Mounting File System (FFM)

The File-on-File Mounting File System allows regular, character, or block-special files to be mounted over regular files and is primarily used by the SVR4-compatible system calls fattach and fdetach of a STREAMS-based pipe (or FIFO).

File-Based Pipes

A file-based pipe implementation replaces the socket-based pipe implementation for improved performance.

/proc File System

The SVR4-compatible /proc file system for Tru64 UNIX allows running processes to be accessed and manipulated as files by ordinary system calls: open, close, read, write, seek, and ioctl.

NETWORKING

TCP/IP

Tru64 UNIX allows for TCP/IP network communications over supported network devices. The TCP/IP protocol suite is implemented in the socket framework.

Sockets

Tru64 UNIX provides sockets that are based on the Berkeley UNIX Operating System structure, which provides a framework for I/O over a network.

STREAMS

Tru64 UNIX provides SVR4-compatible STREAMS. Like sockets, STREAMS provides a framework for character I/O to and from user space to kernel networking protocols.

X/Open Transport Interface (XTI)

The X/Open Transport Interface (XTI) is an extension to the System V STREAMS user space interface called Transport Level Interface (TLI). This interface is threadsafe.

Data Link Bridge (DLB)

Tru64 UNIX provides a DLPI-compatible interface into the non-STREAMS (BSD) driver environment. This interface does not support complete DLPI semantics. The DLB interface is the preferred interface for STREAMS modules to access the BSD-based datalink services.

screend

When the system is operating as an IP router, screend provides flexible per-packet access controls for forwarded packets. This can be used as part of a comprehensive network security plan. Tru64 UNIX also provides interface access filtering to reinforce the system security against IP spoofing attacks.

Packetfilter

The Packetfilter software interface allows an application to send and receive packets directly to or from a LAN (Ethernet or FDDI). The Packetfilter provides flexible filtering of incoming packets, so that many such applications can run simultaneously.

The Tru64 UNIX Packetfilter supports two filtering models: the CMU/Stanford model supported in Compaq ULTRIX, and the BSD Packet Filter (BPF), which provides more flexible and efficient filtering. BPF was developed by the University of California, Lawrence Berkeley Laboratory. The packetfilter pseudo-driver can support up to 255 simultaneous open filters (each filter is usually mapped to one instance of an application program).

Several public domain applications that use the Packetfilter are integrated in Tru64 UNIX, including rarpd, tcpdump, tcpslice, nfswatch, and nfslogsum.

Simple Network Management Protocol (SNMP)

The SNMP agent allows management of the Internet, FDDI, system resources, and network resources using the SNMP. The agent is extensible, allowing software developers to add MIBs to the agent and to participate in the SNMP.

The SNMP agent contains full SNMP V2.c agents, fully compatible with V1.0 MIB implementations, for managing Internet MIB-2 objects, FDDI objects, and Token Ring objects. Support for AgentX is provided in V5.0A.

Dynamic Host Configuration Protocol (DHCP)

Tru64 UNIX includes a complete DHCP server/client solution for centralizing and automating IP address administration using a graphical interface.

Point-to-Point Connections

The Tru64 UNIX system supports point-to-point connections using Serial Line Internet Protocol (SLIP) and Point-to-Point Protocol (PPP). The PPP subsystem implements PPP V2.3.1, which supports asynchronous point-to-point connections and IP. It provides authentification with Password Authentification Protocol (PAP) and Cryptographic Authentification Protocol (CHAP).

Open Network Computing (ONC)

Tru64 UNIX supports Open Network Computing V4.2, including Network File System V2 and V3, PCNFSd, Lock Manager, Status Monitor, NFSportmon, Network Information Service (NIS), automount, and user-level RPC.

Asynchronous Transfer Mode (ATM)

The Tru64 UNIX Asynchronous Transfer Mode subsystem supports the ATM Forum's User-Network Interface (UNI) V3.0 and V3.1 specifications, including the Interim Local Management Interface (ILMI) protocol for registration of up to 32 addresses per interface, UNI signaling for point-to-point connections, and best-effort and CBR VCs for AAL5 PDUs. Also, per-VC cell pacing (to limit the rate at which an end-system transmits) is supported.

The ATM subsystem supports Classical IP (RFC 1577), including support for multiple IP subnets, per-VC MTU negotiation, and packetfilter access to data into and out of the host.

LAN Emulation over ATM is supported (Ethernet and IEEE 802.3 frames only), for carrying IP and LAT protocols. Support is based on the ATM Forum V1.0 specification. Packetfilter access is provided to emulated LAN data into and out of the host.

Tru64 UNIX provides limited support for IP switching over ATM, based on the Ipsilon Networks Inc. reference model (RFC 1953 and 1954). Only one IP switching network device is supported per host, and an ATM adapter used for IP switching cannot simultaneously support ATM Forum UNI or ILMI protocols.

The ATM subsystem (except IP switching and PVCs) can be configured with the atmsetup utility to start automatically at boot time. The current form of the atmsetup utility will be replaced in the next major functional release of the operating system with a version that is part of the System Management application suite.

Tru64 UNIX does not support the UNI V3.0 and V3.1 specifications for full ATM Simple Network Management Protocol (SNMP) Management Information Bases (MIBs), point-to-multipoint connections, Operations and Maintenance (OAM) flows, VBR VCs, AAL1, AAL3/4, or raw AAL.

Slow Ethernet

Tru64 UNIX supports Slow Ethernet (10Base).

Fast Ethernet

Tru64 UNIX supports Fast Ethernet (IEEE 802.3 100Base-TX) in full and half duplex.

Gigabit Ethernet

Tru64 UNIX supports Gigabit Ethernet IEEE 802.3z Gigabit Ethernet Standard, IEEE 802.3x Pause Frame Flow control (X-on/X-off), both symmetric and asymmetric, and is Jumbo frame capable.

Fiber Distributed Data Interface (FDDI)

Tru64 UNIX provides FDDI fiber optic support based on all relevant ANSI and IEEE standards, including SMT revision 7.2.

Token Ring

Tru64 UNIX supports Token Ring (IEEE 802.5) with source routing support for multi-ring networks. Support also includes 4 and 16 MLps over STP and UTP media.

NetRAIN

Tru64 UNIX provides NetRAIN support for Ethernet, Gigabit Ethernet, FDDI, and ATM controllers (LANE only). NetRAIN allows for failover of communications from one controller to another in the event a fault is detected in the communications path.

IP Multicast

Tru64 UNIX supports the Level 2 end-system IP Multicast functionality, specified in RFC 1112, on Ethernet and FDDI. The implementation provides integrated multicast address management for multi-protocol environments.

The Tru64 UNIX implementation also provides kernel routines for encapsulating IP tunnels to enable wide area IP Multicast routing.

These routines include kernel code from public domain Multicast support Version 3.5 and mrouted (Version 3 Copyright 1989 by the Board of Trustees of Leland Stanford University), which provides the Distance Vector Multicast Routing Protocol (DVMRP).

Name Services

Tru64 UNIX supports the Domain Name System (DNS) as described in RFC 1034 and RFC 1035, providing a host name and address lookup service for the Internet network. The Tru64 UNIX implementation of the Domain Name System is based on BIND Version 8.1.2. The user can use BIND to supplement the host's database.

Tru64 UNIX also supports the Sun Network Information Service (NIS), formerly known as Yellow Pages (YP). NIS can be used to replace or supplement hosts, aliases, group, networks, password, protocols, rpc, and services databases.

Network Time Protocol (NTP)

Tru64 UNIX provides the Network Time Protocol V3 to synchronize and distribute the time for all machines in a network environment. The time synchronization daemon, xntpd, is used to distribute time to all machines in a network.

Time Synchronization Protocol (TSP)

Tru64 UNIX provides Berkeley's Time Synchronization Protocol to synchronize the time of all machines in a network without ensuring the accuracy of the time that is provided.

Local Area Transport (LAT)

Tru64 UNIX provides a STREAMS-based implementation of the Local Area Transport that serves terminals to one or more service nodes on a local area network (LAN). LAT allows a host to function as both a service node and a server node. It also enables host applications to initiate connections to server ports (designated as application ports) to access remote devices such as printers.

LAT/Telnet Gateway

The LAT/Telnet gateway service supported in Tru64 UNIX provides a gateway from a LAT terminal server to allow connections to TCP/IP nodes using intermediate LAT hosts.

Number of Logins

The following number of logins has been tested:

RLOGIN:  7,043*
Telnet:	12,395*
LAT:	 4,575*

Netscape

Tru64 UNIX includes the Netscape Communicator V4.7 Internet Client World Wide Web browser. The software license for this bundled version of the Netscape Communicator Internet client is included with the Tru64 UNIX base license. Support for several language fonts, such as Japanese, Korean, Unicode, Simplified Chinese, and Western, is included.

Tru64 UNIX also includes the Netscape FastTrack V3.01 Internet World Wide Web server. The software license for this bundled version of the Netscape FastTrack V3.01 is included with the Tru64 UNIX base license.

RFC Standards

The Tru64 UNIX Operating System implements the following Internet RFC (Request for Comment) and Non-RFC standards:

RFC	Protocol	Name
678	_____	Standard File Formats
768	UDP	User Datagram Protocol
791	IP	Internet Protocol as amended by RFCs 922 and 950
792	ICMP	Internet Control Message Protocol
793	TCP	Transmission Control Protocol
821	SMTP	Simple Mail Transfer Protocol
822	MAIL	Format of Electronic Mail Messages
854	TELNET	Telnet Protocol
855	______	Telnet option specifications
856	______	Telnet binary transmission
857	______	Telnet echo option
858	______	Telnet Suppress Go Ahead option
859	______	Telnet status option
868	TIME	Time Protocol
893	______	Trailer Encapsulations
894	IP-E	Internet Protocol on Ethernet Networks
903	RARP	Reverse Address Resolution Protocol
904	EGP	Exterior Gateway Protocol
919	______	Broadcast Datagram over IP
922	______	IP Broadcast Datagrams with Subnets
950	______	IP Subnet Extension
951	BOOTP	The Bootstrap Protocol
954	RPC	NICNAME/WHOIS (Obsoletes RFC 812)
959	FTP	File Transfer Protocol
1014	XDR	External Data Representation
1034, 1035	DOMAIN	Domain Name System
1042	IP-IEEE	Internet Protocol on IEEE 802
1049	______	Content-Type Field for Internet Messages
1050	RPC	Sun Remote Procedure Calls
1055	SLIP	Serial Line Internet Protocol
1057	______	Portmapper
1058	RIP	Routing Information Protocol
1094	NFS	Network File System Protocol
1112	______	Host Extensions for IP Multicast
1116	______	Telnet Line Mode Option
1119	NTP	Network Time Protocol minus authentication
1122	______	Requirements for Internet Hosts Communication Layers (Must Level)
1123	______	Requirements for Internet Hosts Applications and Support (Must Level)
1144	CSLIP	Compressing TCP/IP Headers for Low-Speed Serial Links
1155	SMI	Structure of Management Information
1156	MIB	Management Information Base
1157	SNMP	Simple Network Management Protocol
1188	IP-FDDI	Transmission of IP over FDDI (Obsoletes RFC 1103)
1191	______	Path MTU Discovery (router specification, host specification)
1212	______	Concise MIB definitions
1213	MIB-II	Management Information Base II (supersedes RFC 1158 and 1156)
1231	______	IEEE 802.5 Token Ring MIB (set operations are not supported)
1253	______	OSPF Version 2 Management Information Base
1256	ICMP	Router Discovery Messages
1282	______	BSD rlogin
1285	______	FDDI Management Information Base (set operations are not supported)
1288	FINGER	Finger Protocol (obsoletes RFC 1196)
1305	NTP	Network Time Protocol V3.0
1321	MD5	The MD5 Message Digest Algorithm
1323	TCP-HIPER	TCP Extensions for High Performance (Window Scale option, Time stamp option and PAWS)
1332	IPCP	The PPP Internet Protocol Control Protocol (obsoletes RFC 1172)
1334	PAP/CHAP	PPP Authentication Protocols
1350	TFTP	Trivial File Transfer Protocol (obsoletes RFC 783)
1483	______	Multiprotocol Encapsulation over ATM AAL5 (routed protocol encapsulation only)
1497	BOOTP	BOOTP Vendor Information Extensions (obsoletes RFC 1048, 1084, 1395; updates RFC 951)
1514	______	Host Resources MIB (set operations are not supported)
1518	CIDR	An architecture for IP Address Allocation with CIDR
1521	______	MIME support as stated in Appendix A of this RFC
1533	DHCP	DHCP options and BOOTP vendor extensions
1534	______	Interoperation between DHCP and BOOTP
1541	DHCP	Dynamic Host Configuration Protocol
1542	______	Clarifications and Extensions for the Bootstrap Protocol (obsoletes RFC 1532; updates RFC 951)
1547	IS-PPP	Requirements for an Internet Standard Point-to-Point Protocol
1571	______	Telnet Environment Option Interoperability Issues
1572	______	Telnet Environment Option
1577	______	Classical IP over ATM
1583	OSPF	OSPF V2 (obsoletes RFC 1247)
1589	______	A Kernel Model for Precision Time-keeping (the support to discipline the system clock to an external precision timing source is not supported)
1626	______	Default MTU for IP over ATM
1633	______	Integrated Services
1652	SMTP	Service Extension for 8 bit-MIME transport
1661	PPP	The Point-to-Point Protocol (obsoletes RFCs 1548,1331, and 1171) (asynchronous IP only)
1700	______	Assigned Numbers (obsoletes RFC 1340, and so forth)
1755	______	Signaling for IP of ATM
1813	NFS	Network File System Version 3 Protocol
1869	SMTP	Service Extensions
1870	SMTP	Service Extension for Message Size Declaration
1891	SMTP	Service Extension for Delivery Status Notification
1892	______	Multipart/ Report Content Type for the Reporting of Mail System Administrative Messages
1893	______	Enhanced Mail System Status Codes
1894	______	Extensible Message Format for Delivery Status Notifications
1939	POP3	Post Office Protocol, Rev. 3
1953	IFMP	Ipsilon Flow Management Protocol Specification for IPv4
1954	______	Transmission of Flow Labeled IPv4 on ATM Data Links
1985	SMTP	Service Extension for Remote Queue Starting
2001	______	TCP Slow Start, Congestion Avoidance, Fast Retransmit, Fast Recovery Algorithms
2018	SACK	Selective Acknowledgement
2060	IMAP4	Internet Message Protocol, Version 4 rev. 1
2205	RSVP	Resource Reservation Protocol for FDDI and ethernet
2211	______	Controlled Load Services

Non-RFC Standards

The Tru64 UNIX Operating System implements the following Non-RFC (Request for Comment) standards:

• 4.3BSD and 4.4BSD Socket Interface

• 4.3BSD inetd

• 4.3BSD lpd

• 4.3BSD netstat

• 4.3BSD ping

• 4.3BSD rcp

• 4.3BSD rexecd

• 4.3BSD rlogin

• 4.3BSD rmt

• 4.3BSD rsh

• 4.4BSD Sendmail V8.9.3

• 4.3BSD syslog

• uucp Basic Networking Utilities (HoneyDanBer)

• X/Open Transport Interface (XTI)

• Sun Open Network Computing (ONC) 4.2

• New rdist command packaged as optional nrdisk

• BSD Packet Data Compression (for PPP)

SECURITY

The Tru64 UNIX Operating System, running Enhanced Security, is designed to meet, and in some cases exceed, the requirements of the C2 evaluation class of DoD 5200.28-STD "Trusted Computer System Evaluation Criteria," also known as the Orange Book.

Tru64 UNIX supports various configurations and setup scripts, which allow selection of such desired Enhanced Security features as extended passwords, audit, and access control lists (ACLs).

System administrators can choose between command-line interfaces or GUIs.

Network Information Service (NIS) Compatibility

Tru64 UNIX provides support for accessing NIS distributed databases while running Enhanced Security. NIS can also be used to distribute the Enhanced Security protected password database. The number of simultaneous logins allowed depends on the configuration.

Security Integration Architecture

All security mechanisms on Tru64 UNIX are part of the Security Integration Architecture (SIA), which isolates security-sensitive commands from the specific security mechanisms. This eliminates the need to modify the security-sensitive commands for each new security mechanism.

Tru64 UNIX includes the following C2 security features:

• Discretionary Access Controls (DAC) -- Allows users to define how the resources they create can be shared. Optional ACLs provide greater granularity of file system object protection at the individual user level than the default DAC protection. The ACL mechanism is designed to POSIX draft 13 with some draft 15 enhancements.

• Auditing -- Allows users to monitor normal and unauthorized usage of a system with a choice of a GUI or command-line interface.

• Identification and Authentication -- Password length and lifetime are based on the Department of Defense Password Management Guideline (Green Book). Features include extensive login controls, such as automatic account lockout, account vacationing, per terminal settings for delays and maximum consecutive failed logins, password usage history, and system-generated password.

• Object Reuse -- Ensures that the physical storage that is assigned to shared objects or that is released prior to reassignment to another user does not contain data from previous users.

• Integrity -- Allows users to validate the correct operation of hardware, firmware, and software components of the Trusted Computing Base (TCB).

• System Architecture -- A separate execution domain is maintained for the Trusted Computing Base (TCB) components using hardware memory management to protect the TCB while it is executing.

Advanced Printing Software

Advanced Printing Software from Compaq is a new printing system for Tru64 UNIX, developed in collaboration with Xerox and based on PrintXchange technology from Xerox. It is a distributed client/server printing system intended for use in workgroup and enterprise environments. Advanced Printing Software is based on a printing model defined by ISO 10175 and a command set defined by POSIX 1387.4. To provide inter-operation with the default BSD based printing system on Tru64 UNIX, Advanced Printing Software uses inbound and outbound gateways to move print jobs to or from the lpr/lpd print subsystems. Advanced Printing Software supports the printer models included in the hardware tables at the end of this document.

UNIX/ WINDOWS INTEROPERABILITY

Data Access -- Object Database Connection and Java Database Connection (ODBC and JDBC)

• Tru64 UNIX provides the family of INTERSOLV DataDirect software products to enable ODBC and JDBC connectivity for your applications. This is optional software for use in developing and deploying applications and is licensed as part of the Tru64 UNIX operating system license.

• SequeLink ODBC Edition is a universal ODBC client component. DataDirect SequeLink ODBC provides transparent connectivity to almost any type of client, network, server, or database.

• For developers working with Java, JDBC provides Java applications to access data sources and databases across platforms. The SequeLink Java Edition is a universal standards-based implementation of JDBC. It is also flexible in design, providing scaleable connectivity from multivendor client, server, and Web environments to industry- leading relational databases. It is optimized and tuned for the Java environment, extending the functionality and performance of existing systems and easily incorporating new technologies.

Common Object Model (COM) for Tru64 UNIX

COM, the Component Object Model, is middleware that Microsoft developed for the Windows platform. COM implements a binary standard that allows two or more applications to work together, regardless of whether they were written by different vendors, in different languages, at different times, on different platforms running different operating systems. DCOM, the Distributed Component Object Model, extends the COM model and provides applications with a way to interact remotely over a network.

COM for Tru64 UNIX implements Microsoft COM as well as the required underlying Windows capabilities for the Compaq Tru64 UNIX platform. The Compaq implementation provides all the basic functions, libraries, and tools that a COM application in a heterogeneous NT client/Tru64 UNIX server environment requires. Programmers who develop only in Windows NT environments will find the same COM Application Programmer Interface (API) and the same behavior in a heterogeneous Windows client/Tru64 UNIX server environment.

COM for Tru64 UNIX provides traditional COM and DCOM capabilities for applications. These capabilities conform to the Microsoft ActiveX Core Technology Specification. They include:

• MIDL, the Microsoft Interface Definition Language Compiler that is used to create the component object interface.

• The interfaces and APIs defined by Microsoft as those needed to support COM on platforms other than Windows.

• Support for COM capabilities, such as Monikers, OLE Automation, Uniform Data Transfer (UDT), Connectable Objects, and type libraries.

• Multithreaded apartment threading model (formerly known as free threads).

• RPC, Remote Procedure Call, that provides the mechanism for communication across the network.

• Registry, the database of COM components and relevant configuration information, and Registry tools, such as sermon and regsvr, that allow the modification of Registry contents.

• Security in the form of call security that allows a client or server to apply an appropriate security level to method calls, and the Security Support Provider Interface (SSPI) standard that defines security providers, which can be accessible to DCOM applications. Microsoft NT uses the Windows NT Distributed Security Provider (also called NTLM SSP). COM for Tru64 UNIX supports "pass-through" NTLM SSP calls.

• Internationalization capability, including UNICODE support of wide characters.

• Error-handling conventions that allow COM objects in different environments to share status information.

Windows 2000 Single Sign-On

Tru64 UNIX allows Windows users to authenticate to Tru64 UNIX using their Windows 2000 username and password. Secure authentication between the Tru64 UNIX system and Active Directory occurs using Kerberos technology. UNIX user account information can be stored in the LDAP-enabled Active Directory, to give administrators a single user account directory spanning Tru64 UNIX and Windows 2000. Administrators can also manage the additional Tru64 UNIX attributes using the Microsoft Management Console (MMC) snap-in extensions provided with this kit.

USER INTERFACES

The following sections describe Tru64 UNIX user interface environments.

Netscape Communicator

Tru64 UNIX includes the Netscape Communicator Internet Client World Wide Web browser. The license for this software is included with the Tru64 UNIX base license. Users of earlier versions of Tru64 UNIX are licensed to use the Netscape Communicator Internet client software when they update to Version 4.0D or later, with an update license or with update services. The Netscape Communicator Internet client supports Japanese fonts.