OSF DCE Administration Guide--Core Components

OSF DCE Administration Guide—Core Components

C_Division

B_organization

A_Conglomerate

B_Division

C_organization

transitive trust

direct trustdirect trust

Rule 3:

Once a hierarchical trust relationship traverses a direct trust ancestor and a direct

trust peer, it cannot traverse to an ancestor of the cell.

For example, consider Figure 33-6. The A_Conglomerate cell hierarchy and the

B_Conglomerate cell are connected by direct trust relationships. Additionally, there is a

direct trust relationship between A_product in the A_Conglomerate hierarchy and

B_product in the B_Conglomerate hierarchy. In this conﬁguration, no transitive trust

relationships are possible because they cannot traverse to an ancestor after traversing a

direct trust peer.

Figure 33-6. Limited Trust Traversal to Cell Ancestors

33 − 6 Tandem Computers Incorporated 124243