[1514] in SAPr3-news
Re: DCE und SAP-R/3
daemon@ATHENA.MIT.EDU (Bernhard Esslinger)
Fri Jun 28 19:57:26 1996
To: sapr3-news@MIT.EDU
Date: Fri, 28 Jun 1996 22:10:11 GMT
From: Bernhard Esslinger <Bernhard.Esslinger@sap-ag.de>
Wolfgang Kilian wrote:
>
> Wer kann was zum Thema DCE und SAP-R/3 sagen ?
> Wird DCE von SAP unterst|tzt oder ist dies geplant ?
>
> Gru_ Wolfgang Kilian
Hallo Herr Kilian,
hier nochmal in etwas modifizierter Form die Antwort aus
der Mailing-List SAP-R3:
There are no plans at moment to support DCE. The SAP
RFC (remote function call) has nothing to do with the
DCE RPC).
From 3.0F SAP recommends those customers who are interested in
highly secured networks, to use R/3 together with a supported
network security product:
1) R/3 will be able to integrate via the GSS-API v.2 into network
security products.
The GSS-API is a open standard defined by the CAT working group
of the IETF.
2) The security products which SAP supports must go through a
certification process. This process is not ready defined yet.
3) The first supported products will be SECUDE v. 5 from GMD
(German National Research Center for Information Technology GmbH)
and Kerberos 5 from OpenVision.
4) The status at moment is that there are 2 pilot installations running
at the MIT in Boston/USA and at GMD in Bonn/Germany.
5) With R/3 v. 3.0F and 3.1 this integration of SAP R/3 into network
wide security products will be officially available
(I am sure this will be within 1996).
6) The first supported network product will be SECUDE (at the same time
when 3.0F or 3.1 is shipped).
SECUDE is a public key based product which enables you to
* establish single sign-on
* support of smartcards for authentication etc.
* establish privacy (encryption)
on all the platforms R/3 is offered.
SECUDE v. 5 will be available worldwide with strong cryptography.
SECUDE will be used by SAP for it's own internal R/3 systems.
More details please see:
http://www.darmstadt.gmd.de/TKT/security/commercial/SECUDEen.html
GMD is a company working in various international commitees.
For example CERT is internally using SECUDE.
7) We plan to officially support OpenVision in the first half of 1997.
At moment there are no plans to support further products before the
second half of 1997. This will allow us to learn from our first
customers and establish a good test frame and a practical
certification process.
8) Please note, that SAP does NOT ship the security product.
The security product has to be bought at the vendor of the certified
product.
Best regards, Bernhard Esslinger (SAP)
