(DP) Support Tip: Restriction for Cell Manager Hostnames

 
1 Likes

There are 3 restrictions regarding the DP Cell Manager hostname.
If these restrictions are not followed, there will be issues with the certificate creation.
Please take this into consideration before installing the product.

 

Hostname and domain components must start with a letter:

Certificate generation is done by the Oracle Java Security Tools (which we use in DP).
The Oracle Java Security Tools insists on strict follow of RFC 952 standard when checking for host names and domain components.
The RFC 952 insists that first character of hostname and every domain component must be letter. This is changed in RFC 1123.
There is already a request to relax the hostname handling in Oracle Java Tools to comply with the RFC 1123, but it is not resolved yet.
Source: http://bugs.java.com/bugdatabase/view_bug.do?bug_id=8054380

 

Hostname with underscore:

As described in RFC-0952, host names may only consist of:
A "name" (Net, Host, Gateway, or Domain name) is a text string up
to 24 characters drawn from the alphabet (A-Z), digits (0-9), minus
sign (-), and period (.). Note that periods are only allowed when
they serve to delimit components of "domain style names".
Source: https://www.rfc-editor.org/rfc/rfc952.txt

 

Hostname longer than 15 characters:

Windows does not permit computer names that exceed 15 characters.
Source: https://support.microsoft.com/en-us/help/909264/naming-conventions-in-active-directory-for-computers-domains-sites-and

 

--------------

According to RFC 1123 for host naming.

2.1  Host Names and Numbers

      The syntax of a legal Internet host name was specified in RFC-952
      [DNS:4].  One aspect of host name syntax is hereby changed: the
      restriction on the first character is relaxed to allow either a
      letter or a digit.  Host software MUST support this more liberal
      syntax.

      Host software MUST handle host names of up to 63 characters and
      SHOULD handle host names of up to 255 characters.

      Whenever a user inputs the identity of an Internet host, it SHOULD
      be possible to enter either (1) a host domain name or (2) an IP
      address in dotted-decimal ("#.#.#.#") form.  The host SHOULD check
      the string syntactically for a dotted-decimal number before
      looking it up in the Domain Name System.

      DISCUSSION:
           This last requirement is not intended to specify the complete
           syntactic form for entering a dotted-decimal host number;
           that is considered to be a user-interface issue.  For
           example, a dotted-decimal number must be enclosed within
           "[ ]" brackets for SMTP mail (see Section 5.2.17).  This
           notation could be made universal within a host system,
           simplifying the syntactic checking for a dotted-decimal
           number.

           If a dotted-decimal number can be entered without such
           identifying delimiters, then a full syntactic check must be
           made, because a segment of a host domain name is now allowed
           to begin with a digit and could legally be entirely numeric
           (see Section 6.1.2.4).  However, a valid host name can never
           have the dotted-decimal form #.#.#.#, since at least the
           highest-level component label will be alphabetic.

QCCR2A58847 - This has not been fixed

QCIM2A79533 - This is not a fix but a check

Labels:

Support Tip
How To-Best Practice
Comment List
Related
Recommended