DCE 1.1: Authentication and Security Services
Copyright © 1997 The Open Group


CAE Specification
DCE 1.1: Authentication and Security Services
Document Number: C311

©October 1997, The Open Group All rights reserved. No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means, electronic, mechanical, photocopying, recording or otherwise, without the prior permission of the copyright owners.

This document and the software to which it relates are derived in part from materials which are copyright © 1990, 1991 Digital Equipment Corporation and copyright © 1990, 1991 Hewlett-Packard Company.

Any comments relating to the material contained in this document may be submitted to The Open Group at:

The Open Group
Apex Plaza
Forbury Road
Berkshire, RG1 1AX
United Kingdom
or by electronic mail to:


The Open Group

The Open Group is the leading vendor-neutral, international consortium for buyers and suppliers of technology. Its mission is to cause the development of a viable global information infrastructure that is ubiquitous, trusted, reliable, and as easy-to-use as the telephone. The essential functionality embedded in this infrastructure is what we term the IT DialTone. The Open Group creates an environment where all elements involved in technology development can cooperate to deliver less costly and more flexible IT solutions.

Formed in 1996 by the merger of the X/Open Company Ltd. (founded in 1984) and the Open Software Foundation (founded in 1988), The Open Group is supported by most of the world's largest user organizations, information systems vendors, and software suppliers. By combining the strengths of open systems specifications and a proven branding scheme with collaborative technology development and advanced research, The Open Group is well positioned to meet its new mission, as well as to assist user organizations, vendors, and suppliers in the development and implementation of products supporting the adoption and proliferation of systems which conform to standard specifications.

With more than 200 member companies, The Open Group helps the IT industry to advance technologically while managing the change caused by innovation. It does this by:

The Open Group operates in all phases of the open systems technology lifecycle including innovation, market adoption, product development, and proliferation. Presently, it focuses on seven strategic areas: open systems application platform development, architecture, distributed systems management, interoperability, distributed computing environment, security, and the information superhighway. The Open Group is also responsible for the management of the UNIX trademark on behalf of the industry.

The Development of Product Standards

This process includes the identification of requirements for open systems and, now, the IT DialTone, development of CAE and Preliminary Specifications through an industry consensus review and adoption procedure (in parallel with formal standards work), and the development of tests and conformance criteria.

This leads to the preparation of a Product Standard which is the name used for the documentation that records the conformance requirements (and other information) to which a vendor may register a product. There are currently two forms of Product Standard, namely the Profile Definition and the Component Definition, although these will eventually be merged into one.

The "X" mark is used by vendors to demonstrate that their products conform to the relevant Product Standard. By use of the Open Brand they guarantee, through the X/Open Trade Mark Licence Agreement (TMLA), to maintain their products in conformance with the Product Standard so that the product works, will continue to work, and that any problems will be fixed by the vendor.

Open Group Publications

The Open Group publishes a wide range of technical documentation, the main part of which is focused on specification development and product documentation, but which also includes Guides, Snapshots, Technical Studies, Branding and Testing documentation, industry surveys, and business titles.

There are several types of specification:

In addition, The Open Group publishes:

Versions and Issues of Specifications

As with all live documents, CAE Specifications require revision to align with new developments and associated international standards. To distinguish between revised specifications which are fully backwards compatible and those which are not:


Readers should note that Corrigenda may apply to any publication. Corrigenda information is published on the World-Wide Web at http://www.opengroup.org/public/pubs.

Ordering Information

Full catalogue and ordering information on all Open Group publications is available on the World-Wide Web at http://www.opengroup.org/public/pubs.

This Document

This document is a CAE Specification (see above). It specifies the DCE 1.1 security model, services, interfaces, and protocols. Its purpose is to provide a portability guide for security application programs and a conformance specification for DCE security implementations.

This document is organized as follows:

Intended Audience

This document is written for security application programmers and developers of DCE security implementations.

Typographic Conventions

The following typographical conventions are used throughout this document:


Cray® is a registered trade mark of Cray Research, Inc.

DECnet® and VAX® are registered trade marks of Digital Equipment Corporation.

Microsoft®, NetBIOS® and NetBEUI® are registered trade marks of Microsoft Corporation.

NetWare® is a registered trade mark of Novell, Inc.

Network Computing System® is a registered trade mark of Hewlett-Packard Company.

Postscript® is a registered trade mark of Adobe Systems Incorporated.

Statemate® is a registered trade mark of i-Logix Incorporated. System/370® and IBM® are registered trade marks of International Business Machines Corporation.

Motif®, OSF/1®, and UNIX® are registered trademarks and the IT DialToneTM;, The Open GroupTM;, and the "X Device"TM; are trademarks of The Open Group.

Referenced Documents

The following documents are referenced in this specification:

ANSI X3.92

American National Standards Institute, Inc. (ANSI): X3.92-1981, American National Standard Data Encryption Algorithm

ANSI X3.106

ANSI X3.106-1983, American National Standard for Information Systems - Data Encryption Algorithm - Modes of Operation


CCITT (now ITU-T) Recommendation V.42-1988.


CCITT (now ITU-T) Recommendation X.208-1988.


Recommendation X.209-1988 (Specification of Basic Encoding Rules for Abstract Syntax Notation One (ASN.1)).


Recommendation X.509-1988.

It is cited in CRC-32 . ISO/IEC 3309:1993(E) is equivalent for the purposes of that section.

DCE Directory

The Open Group CAE Specification, October 1997, The Open Group DCE 1.1: Directory Services (Publication number: C705).


The Open Group CAE Specification, October 1997, The Open Group DCE 1.1: Remote Procedure Call (Publication number: C706).

DCE Time

The Open Group CAE Specification, November 1994, The Open Group DCE 1.1: Time Services (ISBN: 1-85912-067-9, C310).

ISO 8859-1

ISO 8859-1:1987, Information Processing - 8-bit Single-byte Coded Graphic Character Sets - Part 1: Latin Alphabet No. 1.

RFC 1321

The Internet document RFC 1321, by R. Rivest, dated April 1992.

RFC 1510

The Internet document RFC 1510, by J. Kohl and C. Neuman, dated September 1993.

Please note that the html version of this specification may contain formatting aberrations. The definitive version is available as an electronic publication on CD-ROM from The Open Group.

Contents Next section Index