%!PS-Adobe-2.0
%%Creator: dvips by Radical Eye Software
%%Title: us_client_server.dvi
%%Pages: 17 1
%%BoundingBox: 0 0 612 792
%%EndComments
%%BeginDocument: tex.pro
/TeXDict 200 dict def TeXDict begin /bdf{bind def}def /bop-aux{}bdf /@rigin{
/@page-height exch def /@page-width exch def 72 Resolution div dup neg scale
translate}bdf /@letter{Resolution dup -10 mul 8.5 11 @rigin}bdf /@landscape{[
0 1 -1 0 0 0]concat Resolution dup 8.5 11 @rigin}bdf /@a4{Resolution dup
-10.6929133858 mul 21 2.54 div 29.7 2.54 div @rigin}bdf /@legal{Resolution dup
-13 mul 8.5 14 @rigin}bdf /@11x17{statusdict /11x17tray known{statusdict begin
11x17tray end}if Resolution dup -16 mul 11 17 @rigin}bdf /@manualfeed{
statusdict /manualfeed true put}bdf /@copies{/#copies exch def}bdf /@draft{
/bop-aux{gsave initmatrix 72 dup scale @page-width 2 div @page-height 2 div
translate @page-height @page-width atan rotate /Helvetica-Bold findfont 2
scalefont setfont(DRAFT)dup stringwidth pop 2 div neg -1 moveto .95 setgray
show grestore}bdf}bdf /@FontMatrix[1 0 0 -1 0 0]def /@FontBBox[0 0 0 0]def
/dmystr(ZZf@@@)def /newname{dmystr cvn}bdf /df{/fontname exch def dmystr 2
fontname cvx(@@@@)cvs putinterval newname 7 dict def newname load begin
/FontType 3 def /FontMatrix @FontMatrix def /FontBBox @FontBBox def /BitMaps
256 array def /BuildChar{CharBuilder}def /Encoding IdentityEncoding def end
fontname{/foo setfont}2 array copy cvx def fontname load 0 dmystr 6 string
copy cvn cvx put}bdf /dfe{newname dup load definefont setfont}bdf /ch-image{
ch-data 0 get}bdf /ch-width{ch-data 1 get}bdf /ch-height{ch-data 2 get}bdf
/ch-xoff{ch-data 3 get}bdf /ch-yoff{ch-data 4 get}bdf /ch-dx{ch-data 5 get}
bdf /CharBuilder{save 3 1 roll exch /BitMaps get exch get /ch-data exch def
ch-data null ne{ch-dx 0 ch-xoff ch-yoff neg ch-xoff ch-width add ch-height
ch-yoff sub setcachedevice ch-width ch-height true[1 0 0 -1 -.1 ch-xoff sub
ch-height ch-yoff sub .1 add]{ch-image}imagemask}if restore}bdf /dc{/ch-code
exch def /ch-data exch def newname load /BitMaps get ch-code ch-data put}bdf
/bop{gsave /SaveImage save def /bop-aux load exec 0 0 moveto}bdf /eop{clear
SaveImage restore showpage grestore}bdf /@start{/Resolution exch def
/IdentityEncoding 256 array def 0 1 255{IdentityEncoding exch 1 string dup 0 3
index put cvn put}for}bdf /p{show}bdf /RuleMatrix[1 0 0 -1 -.1 -.1]def
/BlackDots 8 string def /v{gsave currentpoint translate false RuleMatrix{
BlackDots}imagemask grestore}bdf /a{moveto}bdf /delta 0 def /tail{dup /delta
exch def 0 rmoveto}bdf /b{exch show tail}bdf /c{show delta 4 sub tail}bdf /d{
show delta 3 sub tail}bdf /e{show delta 2 sub tail}bdf /f{show delta 1 sub
tail}bdf /g{show delta 0 rmoveto}bdf /h{show delta 1 add tail}bdf /i{show
delta 2 add tail}bdf /j{show delta 3 add tail}bdf /k{show delta 4 add tail}
bdf /l{show -4 0 rmoveto}bdf /m{show -3 0 rmoveto}bdf /n{show -2 0 rmoveto}
bdf /o{show -1 0 rmoveto}bdf /q{show 1 0 rmoveto}bdf /r{show 2 0 rmoveto}bdf
/s{show 3 0 rmoveto}bdf /t{show 4 0 rmoveto}bdf /w{0 rmoveto}bdf /x{0 exch
rmoveto}bdf /y{3 2 roll show moveto}bdf /bos{/section save def}bdf /eos{clear
section restore}bdf end
%%EndDocument
%%BeginDocument: texps.pro
TeXDict begin /rf{655360 div mul Resolution mul 7227 div /PixPerEm exch def
findfont dup length 1 add dict /newfont exch def{1 index /FID ne{newfont 3 1
roll put}{pop pop}ifelse}forall 256 dict begin newfont /Encoding get 255 -1 0{
2 copy get 4 -1 roll 1000 mul PixPerEm div def pop}for pop newfont /Metrics
currentdict put end /fontname exch def dmystr 2 fontname cvx(@@@@)cvs
putinterval newname dup newfont definefont[PixPerEm 0 0 PixPerEm neg 0 0]
makefont def fontname{/foo setfont}2 array copy cvx def fontname load 0 dmystr
6 string copy cvn cvx put}bdf /ObliqueSlant{dup sin exch cos div neg}bdf
/SlantFont{/foo exch def[1 0 foo 1 0 0]TransFont}bdf /ExtendFont{/foo exch def
258 2 roll 0 1 255{pop foo div 256 1 roll}for 258 -2 roll[foo 0 0 1 0 0]
TransFont}bdf /TransFont{exch findfont exch makefont dup length dict /newfont
exch def{1 index /FID ne{newfont 3 1 roll put}{pop pop}ifelse}forall dup
newfont definefont pop}bdf end
%%EndDocument
%%BeginDocument: special.pro
TeXDict begin /SDict 200 dict def SDict begin /@SpecialDefaults{/hs 612 def
/vs 792 def /ho 0 def /vo 0 def /hsc 1 def /vsc 1 def /ang 0 def /CLIP false
def /BBcalc false def}bdf /@scaleunit 1 def /@hscale{@scaleunit div /hsc exch
def}bdf /@vscale{@scaleunit div /vsc exch def}bdf /@hsize{/hs exch def /CLIP
true def}bdf /@vsize{/vs exch def /CLIP true def}bdf /@hoffset{/ho exch def}
bdf /@voffset{/vo exch def}bdf /@angle{/ang exch def}bdf /@rwi{10 div /rwi
exch def}bdf /@llx{/llx exch def}bdf /@lly{/lly exch def}bdf /@urx{/urx exch
def}bdf /@ury{/ury exch def /BBcalc true def}bdf end /@MacSetUp{userdict /md
known{userdict /md get type /dicttype eq{md begin /letter{}def /note{}def
/legal{}def /od{txpose 1 0 mtx defaultmatrix dtransform exch atan/pa exch def
newpath clippath mark{transform{itransform moveto}}{transform{itransform
lineto}}{6 -2 roll transform 6 -2 roll transform 6 -2 roll transform{
itransform 6 2 roll itransform 6 2 roll itransform 6 2 roll curveto}}{{
closepath}}pathforall newpath counttomark array astore /gc xdf pop ct 39 0 put
10 fz 0 fs 2 F/|______Courier fnt invertflag{PaintBlack}if}def /txpose{pxs pys
scale ppr aload pop por{noflips{pop exch neg exch translate pop 1 -1 scale}if
xflip yflip and{pop exch neg exch translate 180 rotate 1 -1 scale ppr 3 get
ppr 1 get neg sub neg ppr 2 get ppr 0 get neg sub neg translate}if xflip yflip
not and{pop exch neg exch translate pop 180 rotate ppr 3 get ppr 1 get neg sub
neg 0 translate}if yflip xflip not and{ppr 1 get neg ppr 0 get neg translate}
if}{noflips{translate pop pop 270 rotate 1 -1 scale}if xflip yflip and{
translate pop pop 90 rotate 1 -1 scale ppr 3 get ppr 1 get neg sub neg ppr 2
get ppr 0 get neg sub neg translate}if xflip yflip not and{translate pop pop
90 rotate ppr 3 get ppr 1 get neg sub neg 0 translate}if yflip xflip not and{
translate pop pop 270 rotate ppr 2 get ppr 0 get neg sub neg 0 exch translate}
if}ifelse scaleby96{ppr aload pop 4 -1 roll add 2 div 3 1 roll add 2 div 2
copy translate .96 dup scale neg exch neg exch translate}if}def /cp{pop pop
showpage pm restore}def end}if}if}def /psf$TeXscale{65536 div}def /startTexFig
{/psf$SavedState save def userdict maxlength dict begin Resolution 72 div dup
neg scale currentpoint translate /psf$ury exch psf$TeXscale def /psf$urx exch
psf$TeXscale def /psf$lly exch psf$TeXscale def /psf$llx exch psf$TeXscale def
/psf$y exch psf$TeXscale def /psf$x exch psf$TeXscale def currentpoint /psf$cy
exch def /psf$cx exch def /psf$sx psf$x psf$urx psf$llx sub div def /psf$sy
psf$y psf$ury psf$lly sub div def psf$sx psf$sy scale psf$cx psf$sx div
psf$llx sub psf$cy psf$sy div psf$ury sub translate /showpage{}def /erasepage{
}def /copypage{}def @MacSetUp}def /doclip{psf$llx psf$lly psf$urx psf$ury
currentpoint 6 2 roll newpath 4 copy 4 2 roll moveto 6 -1 roll exch lineto
exch lineto exch lineto closepath clip newpath moveto}def /endTexFig{end
psf$SavedState restore}def /@beginspecial{SDict begin /SpecialSave save def
Resolution 72 div dup neg scale currentpoint translate @SpecialDefaults}bdf
/@setspecial{CLIP{newpath 0 0 moveto hs 0 rlineto 0 vs rlineto hs neg 0
rlineto closepath clip}{initclip}ifelse ho vo translate hsc vsc scale ang
rotate BBcalc{rwi urx llx sub div dup scale llx neg lly neg translate}if
/showpage{}def newpath}bdf /@endspecial{clear SpecialSave restore end}bdf
/@defspecial{SDict begin}bdf /@fedspecial{end}bdf /li{lineto}bdf /rl{rlineto}
bdf /rc{rcurveto}bdf /np{/SaveX currentpoint /SaveY exch def def newpath}bdf
/st{stroke SaveX SaveY moveto}bdf /fil{fill SaveX SaveY moveto}bdf /ellipse{
/endangle exch def /startangle exch def /yrad exch def /xrad exch def
/savematrix matrix currentmatrix def translate xrad yrad scale 0 0 1
startangle endangle arc savematrix setmatrix}bdf end
%%EndDocument
TeXDict begin 300 @start /fa 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0 0 0 0 0 0 0 6 8 10 12 12 21 19 8 8 8 12 14 6 8 6 7 12 12 12 12 12 12 12 12
12 12 7 7 14 14 14 11 23 18 17 17 18 15 14 18 18 8 10 18 15 22 18 18 14 18 17
14 15 18 18 24 18 18 15 8 7 8 12 12 8 11 12 11 12 11 8 12 12 7 7 12 7 19 12 12
12 12 8 10 7 12 12 18 12 12 11 12 5 12 13 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 8 12 12 4 12 12 12 12 4 11 12 8 8 14 14 0 12
12 12 6 0 11 9 8 11 11 12 25 25 0 11 0 8 8 8 8 8 8 8 8 0 8 8 0 8 8 8 25 0 0 0
0 0 0 0 0 0 0 0 0 0 0 0 0 22 0 7 0 0 0 0 15 18 22 8 0 0 0 0 0 17 0 0 0 7 0 0 7
12 18 12 0 0 0 0 /Times-Roman 1000 393216 rf /fb 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 9 12 16 19 19 31 29 12 12 12 19 25 9 12 9 10
19 19 19 19 19 19 19 19 19 19 12 12 25 25 25 19 34 23 23 25 27 23 23 27 27 12
17 25 21 31 25 27 23 27 23 19 21 27 23 31 23 21 21 15 10 15 16 19 12 19 19 17
19 17 10 19 19 10 10 17 10 27 19 19 19 19 15 15 10 19 17 25 17 17 15 15 10 15
20 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 15 19
19 6 19 19 19 19 8 21 19 12 12 19 19 0 19 19 19 9 0 20 13 12 21 21 19 33 37 0
19 0 12 12 12 12 12 12 12 12 0 12 12 0 12 12 12 33 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0 0 33 0 10 0 0 0 0 21 27 35 12 0 0 0 0 0 25 0 0 0 10 0 0 10 19 25 19 0 0 0 0
/Times-Italic 1000 589824 rf /fc 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0 0 0 0 0 0 0 0 0 25 25 25 25 25 25 25 25 25 25 25 25 25 25 25 25 25 25 25 25
25 25 25 25 25 25 25 25 25 25 25 25 25 25 25 25 25 25 25 25 25 25 25 25 25 25
25 25 25 25 25 25 25 25 25 25 25 25 25 25 25 25 25 25 25 25 25 25 25 25 25 25
25 25 25 25 25 25 25 25 25 25 25 25 25 25 25 25 25 25 25 25 25 25 25 0 0 0 0 0
0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 25 25 25 25 25 25 25
25 25 25 25 25 25 0 0 0 25 25 25 25 0 25 25 25 25 25 25 25 0 0 25 0 25 25 25
25 25 25 25 25 0 25 25 0 25 25 25 25 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 25 0
0 0 0 25 25 0 25 0 0 0 0 0 0 0 0 0 25 0 0 25 25 0 25 0 0 0 0 /Courier 1000
655360 rf /fd 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
12 17 28 25 25 50 41 17 17 17 25 28 12 17 12 14 25 25 25 25 25 25 25 25 25 25
17 17 28 28 28 25 46 36 33 36 36 33 30 39 39 19 25 39 33 47 36 39 30 39 36 28
33 36 36 50 36 36 33 17 14 17 29 25 17 25 28 22 28 22 17 25 28 14 17 28 14 41
28 25 28 28 22 19 17 28 25 36 25 25 22 20 11 20 26 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 17 25 25 8 25 25 25 25 14 25 25 17 17
28 28 0 25 25 25 12 0 27 17 17 25 25 25 50 50 0 25 0 17 17 17 17 17 17 17 17 0
17 17 0 17 17 17 50 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 50 0 15 0 0 0 0 33 39 50
16 0 0 0 0 0 36 0 0 0 14 0 0 14 25 36 28 0 0 0 0 /Times-Bold 1000 786432 rf
/fe df[<03C00FF01FF83FFC7FFE7FFEFFFFFFFFFFFFFFFF7FFE7FFE3FFC1FF80FF003C0>16 16
2 -2 21]15 dc dfe /ff 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0 0 0 0 7 10 12 15 15 24 23 10 10 10 15 16 7 10 7 8 15 15 15 15 15 15 15 15 15
15 8 8 16 16 16 13 27 21 19 19 21 18 16 21 21 10 11 21 18 26 21 21 16 21 19 16
18 21 21 27 21 21 18 10 8 10 14 15 10 13 15 13 15 13 10 15 15 8 8 15 8 23 15
15 15 15 10 11 8 15 15 21 15 15 13 14 6 14 16 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 10 15 15 5 15 15 15 15 5 13 15 10 10 16 16
0 15 15 15 7 0 13 10 10 13 13 15 29 29 0 13 0 10 10 10 10 10 10 10 10 0 10 10
0 10 10 10 29 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 26 0 8 0 0 0 0 18 21 26 9 0 0 0
0 0 19 0 0 0 8 0 0 8 15 21 15 0 0 0 0 /Times-Roman 1000 458752 rf /fg 0 0 0 0
0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 10 14 17 21 21 35 32
14 14 14 21 28 10 14 10 12 21 21 21 21 21 21 21 21 21 21 14 14 28 28 28 21 38
25 25 28 30 25 25 30 30 14 18 28 23 35 28 30 25 30 25 21 23 30 25 35 25 23 23
16 12 16 18 21 14 21 21 18 21 18 12 21 21 12 12 18 12 30 21 21 21 21 16 16 12
21 18 28 18 18 16 17 11 17 22 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0 0 0 0 0 0 0 0 0 0 16 21 21 7 21 21 21 21 9 23 21 14 14 21 21 0 21 21 21 10 0
22 15 14 23 23 21 37 42 0 21 0 14 14 14 14 14 14 14 14 0 14 14 0 14 14 14 37 0
0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 37 0 11 0 0 0 0 23 30 39 13 0 0 0 0 0 28 0 0 0
12 0 0 12 21 28 21 0 0 0 0 /Times-Italic 1000 655360 rf /fh 0 0 0 0 0 0 0 0 0
0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 15 20 33 30 30 60 50 20 20 20 30
34 15 20 15 17 30 30 30 30 30 30 30 30 30 30 20 20 34 34 34 30 56 43 40 43 43
40 37 47 47 23 30 47 40 56 43 47 37 47 43 33 40 43 43 60 43 43 40 20 17 20 35
30 20 30 33 27 33 27 20 30 33 17 20 33 17 50 33 30 33 33 27 23 20 33 30 43 30
30 27 24 13 24 31 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0 0 0 0 20 30 30 10 30 30 30 30 17 30 30 20 20 33 33 0 30 30 30 15 0 32 21 20
30 30 30 60 60 0 30 0 20 20 20 20 20 20 20 20 0 20 20 0 20 20 20 60 0 0 0 0 0
0 0 0 0 0 0 0 0 0 0 0 60 0 18 0 0 0 0 40 47 60 20 0 0 0 0 0 43 0 0 0 17 0 0 17
30 43 33 0 0 0 0 /Times-Bold 1000 943718 rf /fi 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 9 12 15 19 19 31 29 12 12 12 19 21 9 12 9 10
19 19 19 19 19 19 19 19 19 19 10 10 21 21 21 17 34 27 25 25 27 23 21 27 27 12
15 27 23 33 27 27 21 27 25 21 23 27 27 35 27 27 23 12 10 12 18 19 12 17 19 17
19 17 12 19 19 10 10 19 10 29 19 19 19 19 12 15 10 19 19 27 19 19 17 18 7 18
20 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 12 19
19 6 19 19 19 19 7 17 19 12 12 21 21 0 19 19 19 9 0 17 13 12 17 17 19 37 37 0
17 0 12 12 12 12 12 12 12 12 0 12 12 0 12 12 12 37 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0 0 33 0 10 0 0 0 0 23 27 33 12 0 0 0 0 0 25 0 0 0 10 0 0 10 19 27 19 0 0 0 0
/Times-Roman 1000 589824 rf /fj 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0 0 0 0 0 0 0 0 0 10 14 23 21 21 42 35 14 14 14 21 24 10 14 10 12 21 21 21 21
21 21 21 21 21 21 14 14 24 24 24 21 39 30 28 30 30 28 25 32 32 16 21 32 28 39
30 32 25 32 30 23 28 30 30 42 30 30 28 14 12 14 24 21 14 21 23 18 23 18 14 21
23 12 14 23 12 35 23 21 23 23 18 16 14 23 21 30 21 21 18 16 9 16 22 0 0 0 0 0
0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 14 21 21 7 21 21 21
21 12 21 21 14 14 23 23 0 21 21 21 10 0 22 15 14 21 21 21 42 42 0 21 0 14 14
14 14 14 14 14 14 0 14 14 0 14 14 14 42 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 42 0
12 0 0 0 0 28 32 42 14 0 0 0 0 0 30 0 0 0 12 0 0 12 21 30 23 0 0 0 0
/Times-Bold 1000 655360 rf /fk 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0 0 0 0 0 0 0 0 10 14 17 21 21 35 32 14 14 14 21 23 10 14 10 12 21 21 21 21 21
21 21 21 21 21 12 12 23 23 23 18 38 30 28 28 30 25 23 30 30 14 16 30 25 37 30
30 23 30 28 23 25 30 30 39 30 30 25 14 12 14 19 21 14 18 21 18 21 18 14 21 21
12 12 21 12 32 21 21 21 21 14 16 12 21 21 30 21 21 18 20 8 20 22 0 0 0 0 0 0 0
0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 14 21 21 7 21 21 21 21 7
18 21 14 14 23 23 0 21 21 21 10 0 19 15 14 18 18 21 42 42 0 18 0 14 14 14 14
14 14 14 14 0 14 14 0 14 14 14 42 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 37 0 11 0 0
0 0 25 30 37 13 0 0 0 0 0 28 0 0 0 12 0 0 12 21 30 21 0 0 0 0 /Times-Roman
1000 655360 rf /fl 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0 0 12 17 20 25 25 41 39 17 17 17 25 28 12 17 12 14 25 25 25 25 25 25 25 25 25
25 14 14 28 28 28 22 46 36 33 33 36 30 28 36 36 17 19 36 30 44 36 36 28 36 33
28 30 36 36 47 36 36 30 17 14 17 23 25 17 22 25 22 25 22 17 25 25 14 14 25 14
39 25 25 25 25 17 19 14 25 25 36 25 25 22 24 10 24 27 0 0 0 0 0 0 0 0 0 0 0 0
0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 17 25 25 8 25 25 25 25 9 22 25 17
17 28 28 0 25 25 25 12 0 23 17 17 22 22 25 50 50 0 22 0 17 17 17 17 17 17 17
17 0 17 17 0 17 17 17 50 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 44 0 14 0 0 0 0 30 36
44 15 0 0 0 0 0 33 0 0 0 14 0 0 14 25 36 25 0 0 0 0 /Times-Roman 1000 786432
rf /fm 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 15 20
24 30 30 50 47 20 20 20 30 34 15 20 15 17 30 30 30 30 30 30 30 30 30 30 17 17
34 34 34 27 55 43 40 40 43 37 33 43 43 20 23 43 37 53 43 43 33 43 40 33 37 43
43 56 43 43 37 20 17 20 28 30 20 27 30 27 30 27 20 30 30 17 17 30 17 47 30 30
30 30 20 23 17 30 30 43 30 30 27 29 12 29 32 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 20 30 30 10 30 30 30 30 11 27 30 20 20 33 33
0 30 30 30 15 0 27 21 20 27 27 30 60 60 0 27 0 20 20 20 20 20 20 20 20 0 20 20
0 20 20 20 60 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 53 0 16 0 0 0 0 37 43 53 19 0 0
0 0 0 40 0 0 0 17 0 0 17 30 43 30 0 0 0 0 /Times-Roman 1000 943718 rf end
 TeXDict begin @letter
%%EndProlog
%%Page: 0 1
 bop 346 534 a fm(Client-Server)12 b(Interactions)g(in)i(Multi-Server)f(Opera\
ting)561 609 y(Systems:)20 b(The)14 b(Mach-US)h(Approach)572 747 y fl(J.)e
(Mark)f(Stevenson)148 b(Daniel)12 b(P)-5 b(.)12 b(Julin)812 818 y(September)g
(1994)830 880 y fk(CMU-CS-94-191)737 1218 y(School)e(of)g(Computer)f(Science)
742 1268 y(Carnegie)h(Mellon)g(University)798 1317 y(Pittsbur)m(gh,)h(P)l(A)f
(15213)898 1665 y fj(Abstract)0 1756 y fk(This)j(paper)g(describes)g(requirem\
ents)f(placed)i(upon)d(client-server)i(interaction)e(in)h(a)h(multi-server)f
(operating)g(system)h(and)g(how)0 1806 y(to)g(answer)i(those)f(requirements.)
26 b(Addressed)14 b(are)h(the)e(problems)h(of)g(binding)e(maintenance)i(in)g
(the)g(face)h(of:)21 b(remote)14 b(method)0 1856 y(invocation,)9 b(forking,)g
(binding)f(transfer)n(,)j(authentication,)e(asynchronous)h(interruption,)d
(and)k(client)e(crashes.)0 1906 y(Design)14 b(and)h(implementation)f(choices)
h(are)h(analyzed.)29 b(The)16 b(solutions,)e(used)h(by)f(the)h(CMU)f(Mach-US)
h(multi-server)f(UNIX)0 1956 y(4.3BSD)c(emulation)f(on)h(the)g(Mach3.0)h(kern\
el,)g(are)g(described.)0 2005 y(The)j(lessons)f(learned)g(are)h(applicable)f
(to)f(multi-server)g(OS)h(design)g(and)g(should)f(be)h(applicable)g(to)f(obje\
ct)h(based)g(systems)h(that)0 2055 y(must)c(resolve)g(these)h(binding)d(probl\
ems)i(in)g(a)h(\252micro\272)g(kernel)f(environment.)60 2582 y fi(This)f(rese\
arch)e(is)j(sponsored)c(by)j(the)g(Advanced)e(Research)g(Projects)i(Agency)e
(under)i(contract)g(number)f(DABT63-93-C-0054.)60 2658 y(The)f(views)h(and)f
(conclusions)f(contained)h(in)h(this)g(document)f(are)h(those)f(of)i(the)f
(authors)f(and)h(should)f(not)h(be)g(interpreted)g(as)f(representing)g(the)0
2704 y(of)o(\256cial)j(policies,)e(either)i(expressed)c(or)k(implied,)g(of)f
(the)g(U.S.)h(Government.)p eop
%%Page: 1 2
 bop 62 2645 a fj(Keywords:)20 b fk(Multi-Server)11 b(Object)h(Oriented)f(Ope\
rating)h(System,)h(Mach,)h(Client-Server)d(Interactions,)h(Remote)h(Method)0
2695 y(Invocation)c(and)h(Interruption,)e(Inter)o(-Process)j(Communication,)e
(OS-item,)i(Proxy)p eop
%%Page: 1 3
 bop 0 45 a fh(1)60 b(Intr)o(oduction)0 138 y fk(Operating)13 b(systems)i(are)
g(being)e(developed)h(with)f(a)h(kernel-based)h(multi-server)e(structure.)26 b
(Such)14 b(systems)g(use)h(an)f(operating)0 188 y(system)c(kernel)f(to)f(supp\
ly)g(system)i(primitives)d(such)j(as)f(tasks,)h(virtual)e(memory)m(,)i(and)g
(IPC.)f(Separate)h(servers)g(are)g(used)f(to)f(support)0 237 y(derived)i(abst\
ractions)f(\()p fg(OS)h(items)p fk(\))f(such)i(as)f(\256les,)h(ttys,)f(and)g
(pipes.)k(Additional)8 b(client-side)h(code)i(may)f(be)h(used)f(to)f(do)h(add\
itional)0 287 y(OS)g(computation.)k(Examples)c(of)f(such)h(architectures)g
(can)h(be)f(seen)g(in)f(systems)i(such)e(as)i(IBM')m(s)f(\252W)m(orkplace)g
(OS\272)g([Phelan)1866 272 y ff(+)1884 287 y fk(93],)0 337 y(OSF1-AD)h([Zajce\
w)317 322 y ff(+)336 337 y fk(93],)g(FSF)g(\252GnuHurd\272,)g(Sun')m(s)g(\252\
Spring\272)g([Khalidi&Nelson93)m(],)h(and)e(Mach-US)i(from)e(Carnegie)h(Mello\
n)0 387 y(University)e([Julin)282 372 y ff(+)299 387 y fk(91)o(].)62 437 y
(The)f(goal)f(of)g(this)g(separation)g(is)g(to)g(achieve)h(several)g(kinds)f
(of)g(\257exibility)e(in)h(system)i(con\256guration)e(and)h(system)h(developm\
ent.)0 486 y(These)k(include:)62 569 y fe(\017)21 b fk(Rapid)7 b(development)
h(of)f(new)i(or)f(modi\256ed)f(subsystems)i(without)d(the)i(potential)e(of)i
(crashing)g(or)f(corrupting)f(other)i(services.)62 652 y fe(\017)21 b fk(Repl\
aceable)11 b(services)g(for)f(features)h(like)e(authentication,)g(\256le)i
(systems,)g(or)f(networking.)62 735 y fe(\017)21 b fk(Support)9 b(for)g(multi\
ple)g(\252application)g(programmer)i(interfaces\272.)62 818 y fe(\017)21 b fk
(Ef)o(\256cient)10 b(use)h(of)f(multi-processor)f(systems.)62 901 y fe(\017)
21 b fk(Accessing)11 b(services)g(on)f(remote)g(nodes,)h(and)f(support)f(for)
h(\252loosely)g(coupled\272)g(OS)g(con\256gurations.)0 985 y(One)h(approach)f
(is)g(for)g(these)h(goals)f(to)f(be)i(achieved)g(via)f(object-based)g(softwar\
e)g(with)f(transparent)h(remote)h(method)f(invocation.)62 1084 y(A)i(framewor\
k)g(for)f(client-server)g(interactions)f(constitutes)h(a)h(central)f(point)g
(for)g(the)g(design)g(of)g(such)h(a)g(multi-server)f(OS.)h(A)0 1134 y(good)d
(framework)h(simpli\256es)f(the)g(implementation)g(and)g(integration)f(of)h
(all)g(the)h(components)f(in)g(the)h(system.)15 b(Conversely)m(,)10 b(a)g(bad)
0 1184 y(framework)g(may)h(adversely)g(af)o(fect)g(the)f(complexity)l(,)h(per\
formance)g(and)f(expressive)h(power)f(of)g(many)h(components.)62 1234 y(The)e
(thrust)e(of)g(this)g(paper)i(is)e(to)h(examine)h(the)e(requirements)h(of)g
(such)g(a)h(framework)f(of)f(invocation)g(and)h(binding)e(maintenance.)0 1283
y(A)14 b(model)f(is)g(developed)h(and)f(the)h(tradeof)o(fs)f(are)i(analyzed.)
25 b(The)14 b(choices)h(made)f(for)f(the)h(Mach-US)g(multi-server)e(system)i
(are)0 1333 y(described)h(and)g(that)f(system)h(will)f(be)h(examined)g(to)g
(determine)g(if)f(the)h(client-server)f(interaction)g(goals)g(were)i(achieved)
f(with)0 1383 y(appropriate)9 b(performance.)62 1433 y(This)k(paper)f(is)h
(not)e(about)h(the)g(general)h(architecture)f(and)h(implementation)e(of)h(the)
g(Mach-US)h(operation)f(system,)h(which)f(is)0 1483 y(described)f(in)f([Julin)
309 1468 y ff(+)326 1483 y fk(91].)17 b(However)n(,)12 b(it)e(is)g(useful)h
(at)g(this)e(point)h(to)g(present)h(a)g(brief)f(overview)h(of)f(its)h(design)
f(and)h(features.)17 b(This)0 1532 y(is)12 b(necessary)h(to)f(supply)f(needed)
h(context)g(for)f(the)h(discussion)f(of)h(how)g(client-server)f(interactions)
g(work)h(in)f(a)i(multi-server)e(OS)0 1582 y(and)f(how)g(they)g(are)h(support\
ed)e(within)g(Mach-US.)0 1722 y fh(2)60 b(Backgr)o(ound:)21 b(What)14 b(is)h
(Mach-US)0 1815 y fk(The)c(Mach-US)f(operating)f(system)h(was)h(created)g(as)
f(part)g(of)f(the)h(Carnegie-Mellon)f(University)f(MACH)i(project.)44 b(Mach-\
US)10 b(is)0 1864 y(an)i(OS)g(which)f(uses)h(the)g(CMU)f(Mach3.0)h(kernel)g
(and)f(runs)h(on)f(i386/i486)e(based)j(hardware)g(supported)f(by)g(Mach3.0)h
(including)0 1914 y(most)e(IBM)g(clones,)h(and)f(the)g(Sequent)g(Symmetry)h
(multi-processor)l(.)62 1964 y(Mach-US)j(currently)f(supplies)f(a)i(Mach2.5/4\
.3BSD)f(API)h(and)f(runs)g(most)g(non-administrative)f(UNIX)h(applications.)
23 b(No)0 2014 y(re-compilation)9 b(or)h(re-linking)e(is)i(required.)0 2132 y
fd(2.1)50 b(Quick)12 b(System)g(Ar)o(chitectur)n(e)h(Overview)0 2210 y fk(Mac\
h-US)h(is)g(a)g(symmetric)g(multi-server)e(OS)i(emulation)f(system.)26 b(It)
13 b(has)h(a)g(set)g(of)f(separate)i(servers)f(supplying)e(generalized)0 2260
y(system)f(services)h(\(\256le)e(systems,)i(network)e(server)o(,)h(process-mg\
r)n(,)h(tty)d(server)o(,)i(etc.\))17 b(and)11 b(an)g(emulation)f(library)f
(loaded)i(into)e(each)0 2310 y(user)g(process.)15 b(This)8 b(library)f(uses)j
(the)e(services)h(to)f(generate)h(the)f(semantics)i(of)e(an)g(industry)f(stan\
dard)h(OS)h(being)f(emulated.)14 b(Some)0 2360 y(of)8 b(the)h(system)g(server\
s)g(are,)h(in)e(part)g(or)h(whole,)f(speci\256c)i(to)e(the)g(OS)h(being)f(emu\
lated)h(while)f(others)g(are)h(meant)g(to)f(be)h(fully)e(generic.)0 2409 y
(Care)j(was)g(taken)g(when)f(writing)f(the)h(OS)h(speci\256c)h(servers)f(to)f
(make)h(parts)g(of)f(them)h(reusable)g(for)f(other)g(OSs.)15 b(There)c(is)e
(no)g(central)0 2459 y(server)o(,)i(either)f(for)h(emulating)e(a)j(speci\256c)
f(OS)g(or)g(for)f(general)h(traf)o(\256c)g(control.)k(All)10 b(multi-service)
g(actions)g(are)i(controlled)d(by)h(the)0 2509 y(emulation)f(library)l(.)16 b
(Details)10 b(can)h(be)f(found)g(in)f([Julin)801 2494 y ff(+)818 2509 y fk
(91].)965 2807 y(1)p eop
%%Page: 2 4
 bop 0 45 a fd(2.2)50 b(Mach-US:)11 b(Flexibility)g(Through)g(Design)0 123 y
fk(The)h(most)e(important)g(property)g(of)g(Mach-US)i(is)f(its)f(\257exibilit\
y)-5 b(.)17 b(It)10 b(of)o(fers)i(a)f(new)n(,)g(highly)e(modi\256able)i(OS)g
(architecture)g(without)0 173 y(signi\256cant)e(structural)h(impediments)f
(to)h(speed.)16 b(Some)11 b(of)f(the)g(features)h(that)e(supply)g(this)h(\257\
exibility)e(are:)62 256 y fe(\017)21 b fk(Object-Oriented)16 b(Generic)j(OS)e
(Interfaces:)30 b(These)19 b(are)g(C++)f(object-oriented)e(interfaces)i(\(vir\
tual)f(classes/methods)104 305 y(for)d(multiple)f(inheritance\))h(that)g(de\
\256ne)h(semantics)h(supplied)d(by)h(the)h(system)g(servers.)29 b(These)16 b
(interfaces)f(are:)24 b(access)104 355 y(mediation,)9 b(naming,)g(I/O,)g(net)
r 13 2 v 13 w(control\(OSI-XTI)e(based\),)j(and)g(async)f(noti\256cation.)k
(The)d(servers)g(support)e(a)h(combination)104 405 y(of)h(these)g(interfaces)
h(to)f(do)g(their)f(work)h(and)g(an)h(emulation)e(library)g(uses)i(them)f(to)
g(emulate)h(the)f(tar)o(get)g(OS)h(in)e(question.)62 488 y fe(\017)21 b fk
(Modular)12 b(Services:)22 b(Dif)n(ferent)14 b(functionality)c(is)k(separated)
g(into)e(these)i(servers:)21 b(con\256guration,)13 b(authentication,)g(root-)
104 538 y(name,)i(diagnostic,)e(pipenet,)g(ufs,)h(process-mgr)o(,)g(tty)l(,)g
(and)f(network)f(\(with)g(a)i(University)d(of)i(Arizona)g(xKernel)g(protocol)
104 588 y(engine)c([Hutchinson&Peterson91)n(]\).)15 b(This)9 b(separation)g
(makes)h(it)f(simple)g(to)g(develop)f(and)i(debug)f(OS)g(services.)16 b(One)9
b(can)104 638 y(also)h(add)g(and)h(subtract)e(services)j(as)f(needed)f(for)g
(a)h(given)f(invocation)e(of)i(the)g(system.)62 721 y fe(\017)21 b fk(Object)
13 b(Library/Code)g(Reuse:)21 b(There)15 b(is)e(an)h(extensive)g(object)f(lib\
rary)f(both)h(for)g(support)f(and)i(implementation)e(of)h(the)104 770 y(vario\
us)f(generic)h(interfaces)g(as)g(well)f(as)h(general)g(server)g(building)e
(blocks.)21 b(This)13 b(enables)g(faster)g(prototyping)c(of)k(a)g(new)104 820
y(server)i(and)f(eases)j(creation)d(of)g(servers)h(from)g(foreign)e(code.)29 b
(Some)15 b(highlights)d(of)i(this)g(are)h(support)e(for)h(name-space)104 870 y
(manipulation,)9 b(protection,)g(shared-mem,)j(IO,)e(and)h(extensive)f(interr\
upt/signal)d(support.)0 1010 y fh(3)60 b(Client-Server)12 b(Interaction)h(Mod\
el)0 1111 y fd(3.1)50 b(Client-Server)11 b(Interaction)h(Objectives)0 1188 y
fk(The)f(main)f(design)g(considerations)f(for)h(the)g(client-server)g(interac\
tion)f(mechanism)i(are:)62 1299 y fj(Integration)g(with)g(the)h(system)g(inte\
rfaces:)42 b fk(Obviously)-5 b(,)12 b(the)g(invocation)e(facility)g(must)h
(work)g(well)g(with)f(all)h(the)h(system)0 1348 y(interfaces.)j(This)9 b(has)
h(several)f(important)f(implications.)13 b(First,)c(all)g(invocations)e(are)j
(always)f(initiated)f(by)g(the)h(client)g(and)g(proceed)0 1398 y(synchronousl\
y)d(until)f(some)j(sort)f(of)g(response)h(is)f(generated)g(by)g(the)h(server)
f(\(optionally)-5 b(,)8 b(there)g(may)g(be)f(no)g(response\).)15 b(Second,)8 b
(the)0 1448 y(invocation)e(facility)g(must)i(support)e(dispatching)h(of)g(ope\
rations)g(to)g(the)g(appropriate)g(items,)i(without)d(exposing)g(server)i(bou\
ndaries.)0 1498 y(Finally)l(,)13 b(the)e(invocation)f(facility)h(must)g(also)
h(support)e(combinations)h(and)h(subclassing)f(of)h(interfaces)g(and)g(handli\
ng)e(of)h(opaque)0 1548 y(argument)e(types.)62 1658 y fj(T)m(ransparency:)42 b
fk(Although)9 b(most)i(items)g(are)h(managed)g(by)f(a)h(server)g(distinct)d
(from)i(the)g(client)g(and)g(residing)f(on)h(the)g(same)0 1708 y(node)e(as)i
(the)e(client,)h(a)g(few)g(special)g(cases)h(must)f(also)f(be)h(taken)g(into)
e(consideration.)14 b(Some)c(servers)h(may)f(be)g(distributed)d(across)k(a)0
1758 y(network)e(and)h(shared)g(between)h(several)f(nodes.)15 b(Conversely)m
(,)10 b(some)h(items,)f(although)e(logically)h(independent)g(from)g(their)g
(client,)0 1807 y(may)h(be)f(best)g(implemented)h(in)e(the)h(same)i(address)f
(space)g(as)g(that)f(client.)14 b(This)9 b(is)g(typically)f(the)h(case)h(when)
g(an)f(item)g(has)h(only)e(one)0 1857 y(client)i(and)g(has)h(only)e(minimal)h
(interactions)f(with)g(the)h(global)f(system)i(state.)62 1907 y(Accordingly)l
(,)16 b(the)e(invocation)f(mechanism)j(should)d(be)i(\257exible)f(enough)g
(to)g(allow)g(the)g(use)h(of)f(various)g(mechanisms)i(for)0 1957 y(communicat\
ion)11 b(between)i(clients)e(and)h(servers.)21 b(Dif)n(ferent)12 b(communicat\
ion)f(mechanisms)j(may)e(be)g(appropriate)f(for)h(dif)n(ferent)0 2007 y(place\
ments)g(of)f(clients)g(and)h(servers.)19 b(In)11 b(particular)m(,)h(when)g
(the)f(client)g(and)g(service)h(manager)g(are)g(located)g(in)f(the)g(same)i
(address)0 2056 y(space,)j(the)e(invocation)e(mechanism)j(degenerates)g(into)
e(a)h(local)g(procedure)g(call)g(or)f(object)h(invocation)e(facility)l(.)26 b
(In)14 b(all)f(cases,)0 2106 y(the)e(actual)h(communication)f(mechanism)i(use\
d)e(should)g(be)h(as)g(transparent)f(as)h(possible)f(to)g(both)f(the)h(client\
s)g(and)h(servers)g(of)f(the)0 2156 y(facility)l(.)k(This)10 b(permits)f(the)
h(actual)g(system)h(or)n(ganization)e(to)h(be)g(changed)g(or)g(extended)f(wit\
h)g(minimal)g(impact)h(on)g(the)g(individual)0 2206 y(components.)62 2316 y fj
(Performance:)43 b fk(Since)12 b(every)g(interaction)f(in)g(the)h(emulation)f
(framework)h(must)f(go)h(through)e(the)i(invocation)e(facility)l(,)i(the)0
2366 y(performance)g(overheads)f(introduced)e(by)i(this)f(facility)f(are)j
(of)e(critical)h(importance.)16 b(This)11 b(is)g(another)f(argument)g(for)g
(supporting)0 2416 y(multiple)h(implementations)f(and)i(modes)h(of)f(communic\
ation)f(within)f(the)i(common)h(invocation)d(facility)l(,)j(so)f(as)g(to)g
(use)g(the)g(best)0 2466 y(approach)f(in)e(each)j(individual)7 b(case.)62 2515
y(One)13 b(particular)f(approach)h(is)g(to)f(use)h(buf)o(fers)g(of)g(shared)g
(memory)g(between)g(speci\256c)h(clients)e(and)h(servers)h(when)f(possible.)0
2565 y(This)8 b(avoids)g(the)g(overheads)h(often)f(introduced)f(by)h(traditio\
nal)e(message-based)11 b(systems.)k(Another)8 b(approach)g(referred)h(to)f
(earlier)0 2615 y(is)k(to)h(try)e(to)i(minimize)f(the)h(the)f(number)h(of)f
(inter)n(-process)i(interactions)d(themselves,)j(through)d(the)i(use)g(of)f
(client-side)g(caching)0 2665 y(and)e(client-side)g(processing.)965 2807 y
(2)p eop
%%Page: 3 5
 bop 62 45 a fj(Inheritance)15 b(for)e(pr)o(ocess)h(creation:)41 b fk(In)13 b
(many)g(tar)o(get)g(systems)g(under)g(consideration,)g(newly)f(created)i(proc\
esses)g(must)0 95 y(inherit)d(a)i(number)g(of)f(item)h(references)h(from)e
(a)h(parent)g(process.)23 b(T)m(o)13 b(exercise)g(such)g(an)g(item)g(referenc\
e,)i(each)f(client)d(needs)j(to)0 145 y(establish)9 b(a)g(client-server)g(int\
eraction.)14 b(Therefore,)c(the)f(invocation)f(facility)g(must)h(provide)f
(an)i(ef)o(\256cient)f(and)h(secure)g(mechanism)0 195 y(for)17 b(new)h(client\
-server)f(interactions)f(to)h(be)h(established,)i(reconstructed,)f(or)e(inher\
ited)g(during)f(process)i(creation.)37 b(Such)18 b(a)0 244 y(mechanism)11 b
(should)f(be)g(scalable)h(to)f(a)h(lar)o(ge)f(number)g(of)g(servers,)i(if)d
(necessary)o(.)62 354 y fj(Garbage)14 b(collection:)41 b fk(Since)14 b(the)f
(invocation)f(facility)g(is)h(the)g(focal)h(point)e(through)f(which)i(clients)
g(access)j(servers,)f(it)d(is)0 404 y(responsible)f(for)g(keeping)g(track)g
(of)g(the)g(allocation)g(and)g(deallocation)g(of)g(client-server)g(relationsh\
ips,)f(and)i(for)f(the)g(appropriate)0 454 y(garbage)j(collection)d(of)i(item\
s)g(and)h(communication)e(resources)i(when)f(they)g(are)h(no)e(longer)h(neede\
d.)24 b(The)14 b(garbage)f(collection)0 504 y(mechanism)f(comes)f(into)e(acti\
on)h(when)h(a)g(client)e(explicitly)g(relinquishes)g(or)h(closes)h(access)i
(to)c(an)i(item)f(and)h(when)f(the)h(failure)e(of)0 553 y(a)i(client)g(proces\
s)g(causes)h(all)f(its)f(item)h(associations)f(to)h(be)g(lost.)16 b(Client-se\
rver)10 b(relationships)f(may)i(change)h(rapidly)d(in)i(an)g(active)0 603 y
(emulation)i(system,)i(so)e(the)g(garbage-collection)g(mechanism)h(must)g(be)
f(ef\256cient.)25 b(In)13 b(addition,)f(the)i(clients)f(of)g(the)g(emulation)
0 653 y(system)8 b(\(i.e.,)h(emulated)f(processes\))g(may)g(fail)f(arbitraril\
y)-5 b(.)14 b(The)9 b(garbage-collection)d(mechanism)j(must)e(be)g(robust)g
(in)g(the)g(presence)0 703 y(of)j(such)h(failures)f(and)h(maintain)f(accurate)
i(information)d(at)h(all)h(times.)16 b(Note)11 b(that)f(we)h(consider)f(only)
g(client)g(failures)g(in)g(this)g(area,)0 753 y(and)e(not)g(server)h(failures\
.)14 b(The)9 b(question)e(of)h(handling)f(failures)h(of)g(arbitrary)f(compone\
nts)h(that)g(implement)g(the)g(emulation)g(system)0 802 y(\(as)k(opposed)f
(to)g(being)g(clients)g(of)g(it\))f(is)h(part)h(of)f(a)h(lar)o(ger)f(issue)h
(of)f(building)e(fault-tolerant)g(systems,)k(and)f(outside)e(the)h(scope)h
(of)0 852 y(the)e(current)g(project.)62 962 y fj(Interruptibility:)41 b fk
(Many)17 b(client-server)g(interactions)f(may)i(last)f(for)g(arbitrary)f(peri\
ods)h(of)g(time,)j(while)c(the)h(server)h(is)0 1012 y(performing)13 b(work)g
(on)h(behalf)f(of)h(the)g(client)f(or)g(waiting)g(for)g(the)h(availability)e
(of)i(various)f(resources.)27 b(However)n(,)15 b(most)f(tar)o(get)0 1062 y
(systems)9 b(require)f(that)g(it)g(be)h(possible)e(for)i(a)g(client)e(or)i
(end-user)f(to)g(abort)g(an)h(ongoing)e(operation)g(and)i(recover)g(control)e
(in)h(a)h(prompt)0 1111 y(and)15 b(orderly)g(fashion.)30 b(This)15 b(implies)
g(that)f(the)i(invocation)d(facility)h(must)i(provide)e(adequate)i(support)e
(to)h(interrupt)e(pending)0 1161 y(low-level)d(operations)g(and)i(re\257ect)g
(the)f(interruption)d(to)j(the)g(higher)g(layers)g(of)g(the)g(tar)o(get)g(emu\
lation)g(library)l(.)18 b(In)11 b(the)g(case)i(when)0 1211 y(the)c(operation)
g(to)g(be)h(aborted)f(is)g(not)g(idempotent)f(\(e.g.,)j(reading)e(or)h(writin\
g)d(on)i(a)h(sequential)f(data)h(stream,)h(accepting)f(a)g(network)0 1261 y
(connection,)h(etc.\),)h(care)g(must)e(be)h(taken)g(that)f(no)h(state)g(is)f
(lost,)g(and)h(that)f(the)h(server)g(is)g(also)g(informed)f(of)g(the)h(abort)
f(in)g(a)i(manner)0 1311 y(such)e(that)g(it)g(can)h(perform)f(adequate)h(reco\
very)f(actions.)62 1420 y fj(Access)j(mediation)c(and)i(client)g(identi\256ca\
tion:)40 b fk(Another)10 b(requirement)h(of)g(a)g(usable)g(system)g(is)g(that)
f(each)i(invocation)d(of)0 1470 y(a)j(speci\256c)h(operation)d(upon)h(a)h(spe\
ci\256c)h(item)f(by)f(a)h(speci\256c)h(client)e(be)h(subject)f(to)g(access)j
(mediation.)19 b(Also,)12 b(the)f(identity)f(of)h(the)0 1520 y(client)e(perfo\
rming)f(a)i(given)e(operation)h(must)g(be)h(made)g(available)f(to)g(the)g(ite\
m)g(manager)i(for)e(informational)e(or)i(logging)e(purposes)0 1570 y(\(e.g.,)
14 b(to)e(keep)g(track)h(of)e(the)i(identity)d(of)i(the)g(creator)g(of)g(a)h
(\256le,)g(or)f(of)g(the)g(client)g(currently)f(holding)f(a)j(global)e(lock,)
h(etc.\).)22 b(This)0 1620 y(identity)12 b(may)k(consist)d(of)i(various)f(ele\
ments)h(of)f(information,)g(such)h(as)g(an)g(authentication)d(identi\256er)i
(\(user)h(id\))e(or)h(a)i(process)0 1670 y(identi\256er)m(,)11 b(if)f(there)g
(is)g(a)h(need)g(to)e(distinguish)f(between)j(multiple)d(clients)i(operating)
f(under)h(the)g(same)i(authentication.)62 1719 y(Although)j(most)h(of)h(these)
g(functions)e(could)h(be)h(provided)e(at)i(other)f(levels)h(of)f(the)g(system\
,)j(integrating)c(them)i(with)e(the)0 1769 y(central)10 b(invocation)e(facili\
ty)g(seems)j(to)e(of)o(fer)h(the)g(best)f(potential)f(for)h(ef\256ciency)n
(,)h(simplicity)-5 b(,)10 b(and)g(uniformity)-5 b(.)15 b(Furthermore,)10 b
(this)0 1819 y(centralization)f(and)i(uniformity)d(themselves)i(facilitate)g
(the)g(veri\256cation)g(of)g(the)g(system)g(from)g(a)h(security)f(standpoint.)
62 1869 y(The)16 b(addition)c(of)j(these)g(functions)e(to)h(the)h(invocation)
e(facility)g(introduces)h(new)h(security)f(considerations)g(in)g(the)g(design\
.)0 1919 y(Although)7 b(the)h(design)h(of)f(secure)i(systems)f(constitutes)f
(a)h(\256eld)g(of)f(its)g(own)h(and)g(is)f(outside)g(the)h(scope)g(of)g(this)
e(work,)i(the)g(emulation)0 1968 y(framework)14 b(must)f(still)e(satisfy)i
(common)h(security)f(requirements.)24 b(In)13 b(particular)n(,)h(it)f(must)g
(not)f(be)i(possible)e(for)h(unauthorized)0 2018 y(users)f(to)f(intercept)f
(invocations)g(performed)i(by)f(other)g(clients)g(or)g(to)g(for)n(ge)h(invoca\
tions)e(such)i(that)e(they)h(appear)h(to)f(be)h(made)g(on)0 2068 y(behalf)e
(of)g(dif)n(ferent)h(clients.)62 2118 y(Finally)l(,)f(the)f(de\256nition)e
(of)i(access)i(mediation)d(and)h(client)f(identi\256cation)g(mechanisms)i(rel\
y)f(on)f(the)h(speci\256cation)g(of)g(a)g(model)0 2168 y(for)f(protection)f
(and)i(authentication)d(that)i(is)h(responsible)e(for)h(determining)g(the)g
(actual)h(security)f(policy)f(that)h(is)g(to)g(be)h(implemented)0 2217 y(by)h
(the)g(above)g(facilities.)15 b(The)c(design)f(of)f(such)i(a)g(model)f(is)g
(lar)o(gely)g(orthogonal)e(to)i(the)g(design)g(of)g(the)g(invocation)e(facili\
ty)h(itself.)0 2336 y fd(3.2)50 b(Semantics)12 b(of)g(Client-Server)f(Associa\
tions)0 2413 y fj(3.2.1)42 b(Information)9 b(exchanged)i(between)g(clients)g
(and)f(servers)0 2491 y fk(Any)d(interaction)f(or)h(invocation)e(between)j
(a)g(client)f(and)g(a)h(server)g(must)f(explicitly)e(or)i(implicitly)e(be)i
(associated)h(with)e(the)i(following)0 2541 y(information:)62 2622 y fe(\017)
21 b fk(A)10 b(tar)o(get)g(item.)62 2704 y fe(\017)21 b fk(The)11 b(name)g
(or)f(identi\256cation)e(of)i(an)h(operation)e(to)h(perform.)965 2807 y(3)p
eop
%%Page: 4 6
 bop 62 45 a fe(\017)21 b fk(Any)10 b(ar)o(guments)g(explicitly)e(for)i(the)g
(requested)h(operation.)62 128 y fe(\017)21 b fk(The)11 b(identity)d(of)i(the)
g(client)g(for)f(authorization)g(and)h(information)f(purposes.)62 211 y fe
(\017)21 b fk(Information)8 b(allowing)g(the)i(invocation)e(facility)h(to)g
(locate)h(the)g(item)g(manager)h(or)e(server)i(for)e(the)h(tar)o(get)g(item)f
(and)h(to)g(route)104 261 y(the)g(request)g(to)g(it.)62 344 y(Furthermore,)h
(items)f(that)g(are)h(not)e(stateless)i(often)e(need:)62 427 y fe(\017)21 b fk
(The)11 b(number)f(of)g(clients)g(currently)f(having)g(access)k(to)c(the)h
(item)h(and)f(the)g(identities)f(of)h(these)g(clients.)62 510 y fe(\017)21 b
fk(The)11 b(types)f(of)g(operations)f(that)h(these)g(clients)g(intend)f(to)h
(perform)g(on)g(the)g(item,)h(or)e fg(access)j(mode)p fk(.)62 593 y(Obviously)
l(,)f(all)g(these)g(categories)h(of)f(information)e(are)j(not)e(necessary)i
(in)f(all)g(cases)h(and)f(the)g(management)i(of)d(each)j(element)0 643 y(enta\
ils)d(some)g(overhead.)16 b(However)n(,)11 b(for)e(system)i(uniformity)-5 b
(,)10 b(clarity)m(,)g(and)g(\257exibility)e(when)i(modifying)e(or)i(adding)f
(or)h(services,)0 693 y(it)g(is)g(important)f(that)h(the)h(same)h(model)e(be)
h(used)g(for)f(all)h(client-server)f(interactions.)15 b(The)c(speci\256cation)
g(of)f(a)h(suitable)f(collection)0 742 y(of)e(client)g(information,)g(along)g
(with)g(appropriate)f(mechanisms)j(to)e(manipulate)h(it,)f(is)h(one)f(of)h
(the)f(key)h(design)f(areas)i(for)e(a)i(common)0 792 y(invocation)f(facility)
l(.)0 903 y fj(3.2.2)42 b(User)o(-visible)9 b(abstraction)h(\261)g fg(binding\
s)0 980 y fk(The)g(need)f(for)g(the)g(servers)h(to)e(keep)i(track)f(of)g(attr\
ibutes)e(of)i(their)f(clients)h(even)g(when)h(no)e(invocation)g(is)h(in)f(pro\
gress)h(indicates)g(that)0 1030 y(the)h(invocation)f(system)i(must)f(maintain)
g(some)h(sort)f(of)g(persistent)f(client-server)h(association.)16 b(W)n(ithin)
9 b(this)g(document,)i(we)g(refer)0 1080 y(to)e(such)g(associations)h(as)g fg
(bindings)p fk(.)j(A)c(binding)f(represents)h(the)h(abstraction)e(through)g
(which)h(a)h(client)f(accesses)j(an)e(OS)f(item,)h(and)0 1130 y(through)g(whi\
ch)i(any)g(item')m(s)g(manager)h(gains)f(knowledge)f(about)g(any)h(particular)
f(client)h(or)f(set)h(of)g(clients.)20 b(Note:)d(A)12 b(binding)e(is)0 1180 y
(not)h(an)h(item)g(itself,)f(or)h(even)g(a)g(language)g(level)g(object.)19 b
(It)11 b(is)h(an)g(abstraction)f(used)h(to)f(describe)h(and)g(discuss)g(a)g
(speci\256c)h(logical)0 1229 y(connection)d(between)g(a)h(client)f(and)g(an)h
(item)f(on)g(a)g(server)o(.)62 1279 y(When)i(a)f(binding)e(is)i(established,)
g(the)g(client)f(indicates)h(that)f(it)h(intends)f(to)g(access)j(the)e(item,)
h(along)e(with)g(the)h(type)f(of)h(access)0 1329 y(that)e(it)h(intends)f(to)g
(exercise.)16 b(That)11 b(binding)d(is)h(dissolved)g(when)h(the)g(client)g
(relinquishes)e(its)i(access)i(to)d(the)h(item.)15 b(Between)c(these)0 1379 y
(two)d(points)g(in)h(time,)g(it)g(must)g(be)g(possible)f(for)h(the)g(item)g
(manager)h(to)f(query)f(for)h(the)g(existence)h(of)f(the)f(binding)g(and)h
(to)f(gain)h(access)0 1429 y(to)i(its)h(relevant)f(attributes.)19 b(In)12 b
(addition,)f(it)g(must)g(be)i(possible)e(for)g(the)h(item)g(manager)h(to)e
(be)h(asynchronously)f(noti\256ed)g(when)h(a)0 1478 y(binding)c(is)i(establis\
hed)g(or)g(destroyed.)62 1528 y(These)h(semantics)f(essentially)e(correspond)
h(to)f(the)h(open/close)g(semantics)h(of)f(many)g(traditional)e(systems.)15 b
(However)o(,)10 b(the)f(use)0 1578 y(of)g(these)h(words)f(may)i(be)f(misleadi\
ng.)k(There)c(is)g(no)f(real)h(\252open\272)g(operation,)f(since)h(the)g(mere)
h(fact)e(that)g(a)i(client)e(can)h(designate)f(or)0 1628 y(reference)j(an)f
(item)g(constitutes)e(a)i(form)g(of)f(binding)f(that)h(must)g(be)h(registered)
g(within)e(the)h(invocation)f(system.)17 b(Instead,)12 b(a)f(client)0 1678 y
(can)g(only)e(gain)h(access)i(to)e(an)g(item)g(and)h(at)f(the)g(same)h(time)g
(establish)e(a)i(binding,)d(either)i(by)g(acquiring)f(a)i(reference)g(to)f
(an)h(existing)0 1727 y(item)g(through)f(some)i(sort)e(of)h(lookup)f(operatio\
n)g(in)h(a)h(existing)e(name)i(space)h(or)e(by)f(causing)i(a)f(new)h(item)f
(to)g(be)g(created)i(in)d(some)0 1777 y(item)g(manager)o(.)62 1827 y(Converse\
ly)m(,)g(there)f(is)g(no)g(need)h(for)f(an)g(explicit)f(\252close\272)j(opera\
tion,)e(since)g(the)h(client)e(does)i(not)e(have)i(to)f(provide)f(any)h(expli\
cit)0 1877 y(information)g(or)h(arguments)g(at)h(that)f(time.)17 b(In)10 b
(any)h(case,)i(a)e(garbage-collection)f(mechanism)i(is)e(needed)i(to)e(detect)
h(when)f(a)i(client)0 1927 y(has)h(crashed)h(and)f(implicitly)d(destroy)i(its)
h(existing)e(bindings.)21 b(An)13 b(explicit)e(close)i(operation)f(should)g
(be)h(used)g(only)f(if)g(such)h(an)0 1977 y(operation)f(can)h(be)g(implemente\
d)g(more)g(ef)o(\256ciently)f(than)g(the)h(default)f(garbage-collection)g(mec\
hanism,)j(but)c(it)h(does)h(not)f(itself)0 2026 y(provide)d(any)i(additional)
d(functionality)-6 b(.)62 2076 y(In)9 b(practice,)i(it)d(is)h(natural)g(to)f
(represent)i(a)f(binding)f(on)h(the)g(client-side)f(with)g(a)i fg(handle)e fk
(that)h(can)h(be)f(manipulated)g(by)g(the)g(client)0 2126 y(and)k(used)g(to)f
(request)g(invocations)f(on)i(the)f(item.)22 b(It)13 b(is)f(also)h(natural)f
(to)g(associate)h(this)f(handle)g(with)g(the)g(location)g(information)0 2176 y
(needed)f(to)f(route)f(invocations)g(to)h(the)g(correct)g(item)h(in)e(the)h
(correct)h(server)g(or)f(item)g(manager)o(.)62 2226 y(In)h(addition)e(to)i
(all)g(the)g(elements)h(discussed)f(above,)h(the)f(last)g(category)g(of)g(inf\
ormation)e(that)i(might)f(belong)g(with)g(a)i(binding)0 2275 y(is)g(the)g(ide\
ntity)f(of)h(the)g(client)g(itself.)20 b(This)13 b(identity)d(may)j(sometimes)
g(be)g(required)f(by)g(the)g(item)g(manager)i(as)f(a)g(static)f(attribute)0
2325 y(of)i(the)f(binding,)g(and)h(is)g(more)g(often)g(required)f(dynamically)
g(when)h(processing)g(an)g(invocation.)24 b(At)14 b(least)g(part)f(of)h(this)
f(client)0 2375 y(identity)6 b(must)h(consist)g(of)h(secure)h(authentication)
d(information.)12 b(Consequently)l(,)d(establishing)d(this)h(information)f
(and)h(transferring)0 2425 y(it)j(between)h(client)f(and)h(server)g(may)g(be)
g(expensive.)17 b(Therefore,)12 b(it)e(is)g(advantageous)h(to)f(attach)h(this)
f(information)f(directly)g(to)h(the)0 2475 y(binding)c(and)h(not)g(to)g(indiv\
idual)e(invocations.)13 b(The)8 b(item)g(manager)g(may)h(store)e(the)g(inform\
ation)f(when)i(the)f(binding)f(is)h(established,)0 2524 y(thus)k(amortizing)g
(the)h(cost)f(of)h(manipulating)e(across)j(further)e(invocations,)g(with)g
(essentially)g(no)g(impact)h(on)g(the)f(semantics)i(and)0 2574 y(usefulness)d
(of)g(the)g(invocation)f(facility)l(.)62 2624 y(In)14 b(summary)n(,)i(a)f(bin\
ding)e(consists)h(of:)23 b(an)14 b(access)j(mode,)f(location)e(information)e
(for)i(the)h(communication)f(subsystem,)i(a)0 2674 y(handle,)10 b(and)h(a)g
(client)e(identity)-5 b(.)965 2807 y(4)p eop
%%Page: 5 7
 bop 0 45 a fj(3.2.3)42 b(T)l(ransfer)12 b(of)e(bindings)f(and)i(binding)e
(inheritance)0 123 y fk(Many)k(bindings)f(come)i(into)f(existence)h(not)e(as)
i(a)g(result)f(of)g(an)h(explicit)e(operation)h(performed)g(by)g(the)h(client\
,)g(but)e(instead)h(are)0 173 y(inherited)c(as)i(a)g(side-ef)o(fect)g(of)e
(a)i(process)g(creation)f(\(e.g.,)i(UNIX)e fg(fork\(\))p fk(,)g(etc.\).)62 222
y(However)o(,)16 b(setting)d(up)h(a)g(new)h(binding)d(in)i(a)h(client)e(is)h
(a)h(complex)g(operation.)26 b(The)15 b(client)f(identity)e(must)i(be)h(estab\
lished)0 272 y(and)f(veri\256ed,)i(the)e(item)g(manager)h(must)f(be)h(noti\
\256ed)e(of)h(the)g(new)h(binding,)e(a)i(client-side)e(handle)h(must)g(be)h
(created,)h(location)0 322 y(information)c(must)h(be)h(maintained)f(or)h(upda\
ted,)g(etc.)26 b(Creating)13 b(new)h(bindings)d(at)j(fork)f(time)h(would)e
(mean)j(that)e(a)h(new)g(child)0 372 y(process)9 b(would)d(explicitly)g(regis\
ter)i(itself)f(with)g(each)i(item)f(manager)h(for)e(each)i(item)f(for)g(which)
f(it)h(needs)g(a)h(binding.)j(Furthermore,)0 422 y(since)f(there)f(is)g(by)g
(de\256nition)f(no)h(way)h(for)e(a)i(process)g(to)f(reference)i(an)e(item)h
(without)d(already)j(possessing)f(a)h(valid)e(binding)f(\(both)0 472 y(the)g
(location)f(information)g(and)h(the)g(security)g(aspects)h(of)f(the)h(access)
h(to)e(the)g(item)g(are)h(themselves)g(part)f(of)g(the)g(binding\),)f(the)h
(parent)0 521 y(process)j(and)g(each)g(manager)h(would)d(need)i(to)f(explicit\
ly)e(collaborate)i(to)g(determine)h(the)f(list)g(of)g(items)g(and)h(bindings)
d(that)i(should)0 571 y(be)h(transferred)f(to)f(the)i(child)e(process.)62 621
y(Obviously)l(,)j(this)f(scenario)h(is)f(quite)g(expensive.)19 b(The)13 b(cos\
t)e(to)g(create)i(a)f(new)g(binding)e(is)h(essentially)g(inherent)g(to)g(the)
g(model)0 671 y(chosen)g(for)g(the)g(system)g(and)g(the)g(requirements)f(that)
h(justify)e(it)h(and)h(cannot)g(easily)f(be)i(reduced)f(in)f(the)h(general)g
(case.)19 b(However)o(,)0 721 y(the)9 b(model)f(can)i(be)f(modi\256ed)f(to)g
(use)h(memory)h(inheritance)e(to)g(logically)f(copy)i(the)f(binding)f(when)i
(the)f(child)g(task)h(is)f(created.)16 b(This)0 770 y(scheme)c(is)e(possible)
f(at)i(the)f(expense)h(of)f(a)h(small)f(loss)g(of)g(generality)f(in)h(the)g
(semantics)h(associated)g(with)e(bindings.)0 881 y fj(Representation)h(of)g
(handles)62 958 y fk(First,)i(the)f(handle)g(and)h(location)e(information)g
(for)h(the)g(binding,)g(which)g(are)h(stored)f(in)g(the)g(client')m(s)h(addre\
ss)g(space,)h(must)f(be)0 1008 y(of)f(a)h(form)f(such)g(that)g(they)g(can)h
(be)f(inherited)f(through)f(the)j(Mach)f fg(task)s 13 2 v 12 w(cr)o(eate\(\))
g fk(operation.)17 b(Although)10 b(this)g(requirement)h(is)g(not)0 1058 y(imm\
ediately)g(met)h(for)f(the)h(most)f(obvious)f(implementation,)h(it)g(does)g
(not)g(constitute)f(a)i(serious)f(dif)o(\256culty)l(.)19 b(This)12 b(matter)g
(will)e(be)0 1108 y(discussed)g(further)g(in)f(section)h(4.2.)0 1218 y fj(Und\
iffer)o(entiated)h(processes)62 1296 y fk(Second,)k(there)f(is)g(no)f(general)
h(way)g(for)f(an)h(item)f(manager)i(to)e(securely)h(dif)n(ferentiate)g(betwee\
n)g(the)f(parent)h(and)g(the)f(child)0 1346 y(process,)e(except)e(through)f
(some)i(form)f(of)h(secure)g(registration)e(with)g(the)h(item)h(manager)o(,)g
(which)f(is)g(precisely)g(what)h(we)g(are)g(trying)0 1395 y(to)f(eliminate.)
15 b(Under)9 b(a)h(strict)f(interpretation)e(of)i(the)h(requirements,)f(this)
g(problem)g(invalidates)g(the)g(inheritance)g(scheme,)j(since)e(a)0 1445 y
(binding)e(is)i(supposed)g(to)g(provide)f(a)h(complete)h(and)f(secure)h(ident\
i\256cation)e(of)h(the)g(client.)k(However)o(,)c(if)g(we)h(subdivide)d(this)i
(client)0 1495 y(identity)g(between)i(a)g fg(user)h(identity)d fk(and)i(a)g fg
(pr)o(ocess)g(identity)p fk(,)g(a)g(compromise)g(is)g(possible.)19 b(The)12 b
(user)g(identity)e(corresponds)h(to)h(a)0 1545 y(logical)f(user)g(of)h(the)f
(system,)i(typically)d(identi\256ed)g(through)g(some)i(sort)f(of)g(authentica\
tion)f(mechanism)j(at)f(login)e(time.)19 b(In)11 b(turn,)0 1595 y(each)i(user)
f(may)g(control)e(several)j(processes,)g(each)g(of)f(which)f(has)h(a)g(dif)n
(ferent)g(process)g(identity)l(.)19 b(The)12 b(compromise)g(consists)g(in)0
1644 y(relaxing)d(the)i(security)e(requirement)h(for)g(the)g(process)h(identi\
ty)d(alone.)62 1694 y(The)14 b(user)e(identity)f(is)i(usually)e(the)i(corners\
tone)f(of)g(the)h(protection)e(system,)j(and)f(must)f(be)h(handled)f(securely)
n(.)22 b(But)12 b(for)g(the)0 1744 y(lar)o(ge)j(majority)f(of)h(process)h(cre\
ations,)h(the)e(user)g(identity)e(of)i(the)g(child)f(is)h(the)g(same)i(as)f
(that)e(of)h(the)g(parent,)i(so)e(that)f(simple)0 1794 y(inheritance)9 b(pres\
ents)h(no)f(problem.)14 b(In)9 b(fact,)h(such)g(inheritance)f(is)g(desirable)
g(to)g(avoid)g(the)g(need)h(for)f(a)h(new)g(interactions)e(with)g(the)0 1844 y
(authentication)h(facility)h(at)h(each)h(process)f(creation.)17 b(In)11 b(the)
f(relatively)g(uncommon)h(cases)i(where)e(a)g(user)g(identity)e(must)i(change\
,)0 1894 y(some)g(re-registration)e(with)g(the)h(authentication)e(service)j
(and)g(the)f(various)f(item)i(managers)g(seems)h(to)d(be)i(unavoidable)62 1943
y(On)f(the)g(other)f(hand,)i(for)e(many)h(tar)o(get)g(systems)h(\(such)f(as)h
(most)e(variants)h(of)g(UNIX\),)g(the)f(process)i(identity)d(is)i(not)f(part)
h(of)f(the)0 1993 y(protection)h(model.)20 b(In)12 b(such)g(a)g(case)h(it)e
(is)h(acceptable)h(to)e(dissociate)h(this)f(information)f(from)h(the)h(bindin\
g.)18 b(This)12 b(simpli\256cation)0 2043 y(may)j(make)h(it)e(possible)g(for)
g(one)h(process)h(to)e(masquerade)i(as)f(another)n(,)i(but)d(not)g(to)g(usurp)
g(dif)n(ferent)h(user)g(privileges,)g(so)g(this)0 2093 y(solution)8 b(does)j
(not)e(compromise)i(system)f(security)m(.)0 2203 y fj(Immutable)f(bindings)62
2281 y fk(Third,)j(if)g(an)g(item)g(manager)h(cannot)f(distinguish)d(between)
k(several)f(clients)g(belonging)e(to)h(a)i(single)e(client)g(family)m(,)i(it)
e(is)h(not)0 2331 y(acceptable)d(for)f(one)g(such)g(client)g(to)f(unilaterall\
y)g(change)h(some)h(attributes)e(of)h(the)f(binding)f(\(access)11 b(mode,)e
(identity)-5 b(,)9 b(etc.\),)h(thereby)0 2380 y(affecting)g(the)h(operation)g
(of)g(the)g(other)g(clients)g(without)e(their)h(control)g(or)i(knowledge.)17 b
(The)12 b(simplest)f(solution)e(to)i(this)g(problem)0 2430 y(is)g(to)g(make)i
(all)e(sensitive)g(attributes)f(of)h(the)g(binding)f(immutable,)h(that)g(is,)
h(they)f(are)h(established)g(atomically)e(when)i(the)f(binding)0 2480 y(is)i
(created)g(and)g(can)g(never)h(be)f(modi\256ed)f(afterwards.)23 b(This)13 b
(approach)g(may)g(necessitate)h(the)e(creation)h(of)f(additional)f(bindings)0
2530 y(with)d(dif)o(ferent)h(sets)h(of)f(attributes)f(in)h(some)h(operational)
e(situations,)g(but)h(in)g(practice)h(it)e(appears)j(that)d(the)i(need)g(for)
e(such)i(dynamic)0 2580 y(changes)h(of)f(attributes)f(is)h(suf)o(\256ciently)
f(infrequent)g(to)h(justify)f(this)g(restriction.)965 2807 y(5)p eop
%%Page: 6 8
 bop 0 45 a fj(No)10 b(count)h(of)f(clients)62 123 y fk(Finally)l(,)17 b(we)e
(must)g(give)f(up)h(on)f(keeping)h(an)g(accurate)h(count)e(of)h(the)f(number)
h(of)g(outstanding)d(clients)j(for)f(a)i(given)e(item,)0 173 y(since)e(keepin\
g)e(such)i(a)g(count)e(would)g(be)i(equivalent)e(to)h(keeping)g(track)g(of)g
(all)g(process)h(creation)f(and)g(other)g(transfer)g(operations)0 222 y(affec\
ting)f(each)h(item.)17 b(It)10 b(appears)i(that)e(in)g(all)g(practical)h(case\
s,)i(the)d(system)h(only)f(requires)g(that)h(item)f(managers)i(be)f(aware)h
(of)e(the)0 272 y fg(existence)h fk(of)f(clients)g(with)e(a)j(particular)e
(identity)f(and)i(access)i(mode,)f(not)e(of)h(the)g(actual)g(number)g(of)g
(these)g(clients.)15 b(Furthermore,)0 322 y(Mach)d(provides)e(an)h(ef\256cien\
t)g(garbage-collection)f(facility)g(\(see)i(4.3\))f(that)g(can)h(detect)f(the)
g(presence)h(or)f(absence)i(of)e(clients,)g(but)0 372 y(not)e(their)h(number)
m(.)16 b(In)10 b(view)g(of)g(these)g(considerations,)g(such)g(a)h(restriction)
e(in)h(semantics)h(also)f(seems)i(acceptable.)0 512 y fh(4)60 b(A)15 b(Design)
f(for)h(the)f(Model)h(and)g(Objectives)0 613 y fd(4.1)50 b(Programming)12 b
(Aspects)0 690 y fj(4.1.1)42 b(Representing)10 b(and)h(pr)o(oducing)g(invocat\
ions)0 768 y fk(The)h(\256rst)f(basic)h(programming)e(issue)i(with)e(respect)
i(to)f(programming)f(in)h(the)g(context)g(of)g(the)g(client-server)g(interact\
ion)f(facility)0 818 y(is)j(how)g(the)g(invocations)f(themselves)i(should)e
(be)h(presented.)24 b(The)14 b(chosen)g(mechanism)g(is)f(to)g(represent)h(ite\
m)f(invocations)e(as)0 868 y(standard)j(C++)h(language)f(method)f(invocations\
.)26 b(It)13 b(is)h(the)g(responsibility)d(of)j(the)g(remote)g(invocation)f
(system)h(to)g(make)h(such)0 917 y(method)10 b(invocations)f(appear)i(as)g
(if)e(they)h(were)h(local)f(to)g(the)g(current)g(executable)h(when)f(they)g
(are)h(not.)62 967 y(The)16 b(Mach)g(RPC)e(stub)h(generator)f(named)i(Mig)f
(is)f(inappropriate)g(for)g(this)h(function.)28 b(Instead,)16 b(Mach-US)g(has)
f(a)h(remote)0 1017 y(invocation)11 b(package)i(that)f(is)g(better)f(suited)h
(to)g(the)g(object-oriented)e(view)i(taken)h(in)e(the)h(system,)i(and)e(that)
g(provides)f(additional)0 1067 y(\257exibility)6 b(for)i(various)f(extensions)
h(in)g(functionality)-6 b(.)15 b(This)8 b(package)i(can)f(be)g(subdivided)d
(in)i(three)g(parts:)14 b(a)9 b(run-time)e(system)i(that)0 1117 y(transports)
f(invocations)g(and)i(item)f(references)j(between)e(client)e(and)i(server)o
(,)g(a)g(set)g(of)f(client-side)g(objects)g(that)g(interface)h(between)0 1166
y(the)g(clients)f(and)h(the)f(run-time)g(system,)i(and)f(a)g(set)g(of)g(serve\
r)o(-side)g(objects)f(that)g(interface)i(between)f(the)f(run-time)g(system)h
(and)g(the)0 1216 y(code)f(implementing)e(each)i(item)f(in)f(the)h(item)h(man\
ager)n(.)15 b(The)9 b(run-time)e(system)h(itself)g(is)g(not)f(directly)g(visi\
ble)g(to)h(the)g(programmers)0 1266 y(of)14 b(any)g(emulation)f(system;)j(its)
e(most)g(important)f(features)h(will)f(be)i(discussed)f(in)g(section)g(4.2.)
26 b(The)15 b(other)f(two)f(aspects)j(bear)0 1316 y(directly)11 b(upon)h(the)
g(view)h(of)f(the)g(emulation)g(framework)h(presented)f(to)g(the)h(programmer\
s)f(of)h(any)f(emulation)g(system,)i(and)e(are)0 1366 y(discussed)e(below)m
(.)16 b(More)10 b(details)g(about)f(this)h(package)h(can)g(also)f(be)h(found)
e(in)h([Guedes&Julin91)o(].)0 1476 y fj(4.1.2)42 b(Client)9 b(view)h(\320)g fg
(pr)o(oxies)0 1554 y fk(Each)d(binding)t(on)f(the)g(client)f(side)i(is)e(repr\
esented)i(with)e(a)i(special)f(mechanism)i(called)e(a)h fg(pr)n(oxy)g(object)
e fk(or)h(simply)f fg(pr)o(oxy)p fk([Shapiro86)o(].)0 1604 y(A)11 b(proxy)e
(is)h(a)h(body)f(of)g(code)h(loaded)f(in)g(a)h(client')m(s)g(address)g(space)
h(which)e(acts)h(as)g(a)g(representative)g(with)e(that)h(client)g(for)g(a)h
(given)0 1653 y(item)f(from)g(a)h(given)e(server)n(.)16 b(All)9 b(operations)
g(on)h(the)g(item)g(are)h(invoked)e(by)g(the)h(client)g(as)h(local)e(operatio\
ns)h(on)f(the)h(proxy)f(instead)0 1703 y(of)j(being)g(directed)g(at)h(the)f
(server)n(.)22 b(In)12 b(the)h(simple)f(cases,)j(the)d(proxy)g(simply)f(forwa\
rds)h(or)g fg(delegates)h fk(all)f(client)g(invocations)f(to)0 1753 y(the)j
(server)h(via)f(Mach)h(IPC,)g(but)e(in)h(other)g(cases,)j(the)d(proxy)g(may)h
(perform)f(most)g(or)g(all)g(of)g(the)g(processing)g(locally)m(,)i(thereby)0
1803 y(reducing)10 b(the)h(communications)g(overhead)g(and)h(the)f(load)f(on)
h(the)g(server)n(.)18 b(One)11 b(typical)g(application)e(is)i(to)g(use)g(a)h
(proxy)e(to)h(cache)0 1853 y(information)6 b(on)i(the)g(client)g(side)g(of)g
(a)h(client-server)f(interface.)15 b(Another)8 b(application)e(is)i(to)g(use)
h(a)g(proxy)e(to)h(transparently)f(manage)0 1902 y(a)j(region)f(of)g(memory)h
(shared)g(between)g(the)f(client)g(and)h(the)f(server)h(\(e.g.,)h(an)f(open)f
(\256le)h(in)f(a)h(\256le)f(server\),)i(thereby)e(avoiding)f(much)0 1952 y
(communication)h(overhead.)15 b(A)9 b(new)h(proxy)e(object)h(is)g(instantiate\
d)e(in)i(a)h(client')m(s)f(address)h(space)g(as)g(part)f(of)g(the)g(protocol)
f(through)0 2002 y(which)13 b(that)f(client)g(gains)h(access)i(to)e(the)f(cor\
responding)g(item,)i(with)e(support)g(from)g(the)h(run-time)f(system.)24 b
(The)14 b(set)f(of)g(all)f(the)0 2052 y(proxies)e(for)h(the)g(items)g(current\
ly)g(accessed)i(by)e(a)g(given)g(client)f(can)i(be)g(viewed)f(as)h(an)f(addit\
ional)f(layer)h(of)g(software)g(within)e(the)0 2102 y(service)k(layer)g(typic\
ally)e(implemented)h(by)g(the)h(collection)e(of)h(servers.)23 b(Although)11 b
(they)h(reside)g(in)g(the)h(client')l(s)g(address)g(space,)0 2151 y(those)d
(proxies)f(are)i(logically)d(part)i(of)f(the)h(implementations)f(of)h(the)f
(servers)i(for)f(the)f(items)h(which)g(they)f(represent.)16 b(Their)10 b(natu\
re,)0 2201 y(as)h(well)f(as)i(their)d(implementation)g(or)i(object)f(class,)i
(are)f(speci\256ed)g(by)f(the)h(designers)f(of)g(each)i(individual)c(server)j
(and)f(not)g(by)g(the)0 2251 y(clients.)62 2301 y(In)k(this)f(context,)i(the)
f(handles)g(referred)h(to)e(above,)j(that)e(are)h(used)f(to)g(designate)g(ind\
ividual)d(bindings)h(on)i(the)g(client)g(side,)0 2351 y(correspond)9 b(simply)
f(to)g(the)h(address)g(of)g(speci\256c)h(proxies.)k(The)c(memory)f(allocated)
g(for)f(such)i(proxies)e(can)i(naturally)d(be)i(inherited)0 2401 y(across)16 b
(a)g fg(task)s 13 2 v 12 w(cr)o(eate\(\))g fk(operation)e(and)i(retain)f(the)
g(same)i(address)f(in)f(the)g(child)g(address)h(space,)j(so)c(that)g(the)g
(inheritance)g(of)0 2450 y(bindings)c(can)j(be)g(handled)f(without)e(any)i
(explicit)f(intervention)f(or)i(modi\256cation)f(in)h(the)g(client)f(code.)25
b(However)n(,)15 b(the)e(proxies)0 2500 y(themselves)d(may)g(contain)f(state)
g(\(such)h(as)g(port-rights\))c(that)j(is)g(not)g(automatically)f(inherited)g
(across)i fg(task)s 13 2 v 12 w(cr)o(eate\(\))p fk(.)15 b(W)m(e)10 b(describe)
0 2550 y(a)h(mechanism)g(to)f(deal)g(with)g(this)f(question)g(later)h(in)g
(this)f(section.)62 2600 y(Finally)l(,)i(the)e(set)h(of)g(methods)f(exported)
h(by)f(a)h(proxy)f(need)h(not)f(be)h(the)g(same)h(as)g(the)e(set)h(of)g(metho\
d)f(invocations)g(or)g(messages)0 2650 y(exchanged)i(between)f(a)h(proxy)e
(and)i(its)e(corresponding)g(item)h(manager)o(.)15 b(Only)10 b(the)g(\256rst)
g(set)g(of)g(methods)g(are)h(visible)e(to)h(clients)f(of)0 2699 y(the)h(syste\
m)g(and)f(constitute)g(the)g(actual)h(exported)f(item)h(interface.)15 b(This)
10 b(provides)f(another)g(useful)g(level)h(of)f(indirection)f(between)965 2807
y(6)p eop
%%Page: 7 9
 bop 0 45 a fk(clients)9 b(and)h(servers)h(that)e(can)h(be)h(put)e(to)g(use)h
(to)f(implement)h(any)g(number)f(of)h(optimizations.)j(Furthermore,)d(the)g
(speci\256cation)f(of)0 95 y(the)i(second)g(set)g(of)f(methods)h(is)f(purely)
g(a)h(private)f(matter)h(for)f(the)h(designer)f(of)h(each)h(individual)c(serv\
er)o(,)j(since)g(each)h(server)f(must)0 145 y(also)f(supply)f(its)h(own)g(pro\
xies.)k(Therefore,)e(this)d(interface)i(need)f(not)g(be)g(standardized)h(in)e
(any)i(way)m(.)0 255 y fj(4.1.3)42 b(Server)11 b(view)g(\320)e fg(agents)h fj
(and)g fg(agencies)0 333 y fk(For)j(the)g(simple)g(purpose)g(of)g(transferrin\
g)f(invocations,)h(no)g(special)g(user-visible)f(mechanism)i(is)f(needed)h
(on)f(the)g(server)h(side.)0 383 y(The)c(run-time)f(system)h(can)g(take)g(the)
f(full)g(responsibility)e(for)i(calling)f(the)i(tar)o(get)f(function)f(of)h
(method)h(directly)l(,)g(without)e(need)i(for)0 432 y(any)f(proxy-like)f(stub\
.)14 b(The)c(only)e(requirement)h(is)h(that)e(the)i(address)g(of)f(all)g(remo\
tely)g(accessible)h(functions)e(be)i(made)g(available)g(to)0 482 y(the)g(remo\
te)h(invocation)d(system.)16 b(This)10 b(is)g(accomplished)h(with)e(a)h(set)h
(of)f(special)g(compile-)g(and)h(initialization-time)6 b(declarations)0 532 y
(\(see)11 b([Guedes&Julin91)o(]\).)0 642 y fj(Making)f(binding)f(information)
g(available)f(to)i(item)g(managers)62 720 y fk(First,)i(we)g(must)f(decide)h
(how)f(the)g(information)e(associated)k(with)d(a)i(binding)d(is)j(made)g(avai\
lable)f(to)g(the)g(code)h(implementing)0 770 y(the)i(tar)o(get)f(function)f
(or)i(method.)25 b(On)13 b(the)h(client-side,)g(this)e(information)g(is)i(imp\
licitly)d(represented)j(by)f(the)h(address)g(that)f(the)0 820 y(client)g(uses)
h(as)g(a)g(tar)o(get)g(for)f(invocation,)g(corresponding)f(to)h(the)g(address)
h(of)f(the)h(proxy)e(object.)25 b(But)12 b(on)h(the)h(server)g(side,)g(the)0
869 y(situation)9 b(is)h(reversed:)16 b(the)10 b(invocation)f(is)i(received)g
(on)f(a)h(binding)e(handled)h(internally)f(by)h(the)h(remote)g(invocation)e
(system,)i(and)0 919 y(forwarded)f(to)g(an)g(object)g(representing)g(an)g(ite\
m)g(that)g(is)g(the)g(same)i(for)e(all)f(bindings)g(associated)i(with)e(the)h
(same)i(item.)62 969 y(This)e(issue)h(can)g(be)f(resolved)g(in)g(two)g(major)
g(ways:)15 b(add)10 b(an)h(explicit)e(ar)o(gument)h(to)g(each)h(remote)g(call)
f(to)g(specify)g(the)g(binding)0 1019 y(information,)15 b(or)h(make)g(this)f
(information)f(available)h(implicitly)f(through)f(some)k(other)e(language-lev\
el)g(mechanism)i(such)e(as)0 1069 y(thread-speci\256c)c(data)f(or)g(a)h(globa\
l)e(variable.)62 1118 y(The)j(use)g(of)e(an)i(explicit)e(credentials)h(ar)o
(gument)g(is)g(certainly)f(simple,)i(and)f(has)h(been)f(adopted)g(in)g(severa\
l)g(existing)f(systems,)0 1168 y(such)e(as)g(the)g fg(vnode)g(interface)p fk
([Kleiman86)o(].)14 b(However)n(,)9 b(such)f(a)g(solution)e(presents)i(many)g
(awkward)g(properties.)13 b(Since)8 b(it)f(is)h(never)0 1218 y(clear)j(where)
h(the)e(access)j(mediation)d(will)f(be)j(needed,)f(the)g(extra)g(ar)o(gument)
g(tends)f(to)g(percolate)h(to)f(many)h(lower)o(-level)f(functions)0 1268 y
(in)g(addition)e(to)h(the)h(main)h(exported)e(remote)i(functions.)j(This)c
(may)g(lead)h(to)e(increased)i(overhead)g(simply)e(for)h(the)g(propagation)e
(of)0 1318 y(the)j(access)h(mediation)e(information.)15 b(Conversely)m(,)c
(the)g(use)g(of)f(this)g(extra)h(argument)f(is)g(not)g(uniform:)15 b(many)c
(internal)e(functions)0 1367 y(do)g(not)g(require)h(it)f(at)g(all,)h(and)g
(it)f(is)h(not)e(clear)j(if)e(they)g(should)g(have)h(a)h(dummy)e(argument.)14
b(In)c(particular)m(,)h(this)d(information)g(cannot)0 1417 y(be)j(speci\256ed)
h(on)f(the)g(client)g(side,)g(since)h(by)f(its)f(very)h(de\256nition)f(it)g
(must)h(be)g(supplied)f(by)h(the)g(\(secure\))h(invocation)e(system.)18 b(But)
0 1467 y(removing)11 b(the)i(extra)f(ar)o(gument)g(on)g(the)g(client-side)g
(destroys)f(the)h(symmetry)h(between)f(client-)g(and)g(server-side)g(interfac\
es)h(for)0 1517 y(the)f(same)i(operations.)21 b(Similarly)l(,)13 b(not)f(spec\
ifying)f(the)i(extra)f(argument)g(on)g(purely)f(local)i(or)f(internal)f(funct\
ions)g(\(where)i(there)0 1567 y(may)e(not)e(be)i(a)g(meaningful)e(value)h(for)
g(it)g(at)g(all\))g(destroys)f(the)i(transparency)f(between)h(local)f(and)g
(remote)h(functions.)62 1617 y(In)c(comparison,)g(the)g(implicit)e(speci\256c\
ation)h(of)h(the)f(mediation)g(information)f(seems)j(much)f(more)g(attractive\
,)g(and)g(has)g(therefore)0 1666 y(been)12 b(adopted)f(for)f(the)i(emulation)
e(framework.)19 b(Since)11 b(servers)h(are)g(in)f(general)h(multi-threaded,)e
(a)i(speci\256c)g(key)f(for)g(per)o(-thread)0 1716 y(data[PThreads93])i(is)g
(allocated)g(to)f(hold)g(a)i(pointer)d(to)i(this)f(information)f(for)h(all)h
(threads)g(in)f(a)i(server)f(operating)f(on)h(behalf)f(of)0 1766 y(a)g(client\
.)18 b(This)11 b(\252mediation)g(pointer\272)h(is)g(established)f(transparent\
ly)f(by)h(the)g(run-time)g(system,)h(and)g(can)g(be)f(freely)h(accessed)h(by)
0 1816 y(any)e(code)h(module)f(that)g(requests)h(it.)18 b(Given)11 b(current)
g(implementations)f(of)h(such)h(per)o(-thread)f(data)h(pointers,)f(it)f(appea\
rs)i(that)f(the)0 1866 y(small)f(possible)e(increase)j(of)e(overhead)h(for)f
(this)g(type)g(of)g(access)j(compared)e(to)f(the)g(use)h(of)g(explicit)e(ar)o
(guments)i(is)f(not)g(signi\256cant,)0 1915 y(particularly)g(in)g(view)h(of)g
(the)h(costs)f(for)g(copying)f(this)g(argument)h(on)g(potentially)d(many)k
(stack)g(frames.)0 2026 y fj(Representation)f(of)g(binding)g(information)62
2103 y fk(Second,)f(the)e(binding)e(information)h(is)h(represented)h(by)f(a)h
(mediation)e(object)h(or)g fg(agent)p fk(.)14 b(This)7 b(object)g(is)g(used)h
(as)g(a)g(\256lter)f(between)0 2153 y(the)12 b(remote)g(invocation)e(system)j
(and)e(the)h(actual)g(code)h(implementing)d(each)j(item.)20 b(The)13 b(client\
-server)e(interaction)g(mechanism)0 2203 y(is)i(or)o(ganized)g(in)g(such)g
(a)h(way)g(that)e(invocations)g(on)h(each)h(binding)e(are)i(dispatched)f(to)f
(an)i(agent)f(object)g(corresponding)f(to)g(the)0 2253 y(binding)7 b(instead)
i(of)f(being)h(dispatched)f(directly)g(to)g(the)h(item.)15 b(The)10 b(agent)f
(veri\256es)g(that)f(a)i(given)e(invocation)f(is)i(allowed)g(under)f(the)0
2303 y(current)j(access)j(mediation)c(policies,)i(updates)f(the)h(per)o(-thre\
ad)f(mediation)g(pointer)f(and)h(forwards)g(the)h(invocation)e(to)h(the)g(act\
ual)0 2352 y(item.)62 2402 y(An)f(advantage)g(of)f(the)h(use)g(of)f(agent)h
(objects)g(in)f(this)g(way)g(is)h(that)f(the)h(same)h(implementation)d(of)i
(an)g(agent)f(can)i(often)e(be)h(used)0 2452 y(for)g(many)i(dif)n(ferent)f
(types)g(of)f(items,)i(using)e(a)h(table-driven)f(mechanism)i(to)e(apply)h
(the)f(mediation)g(for)h(speci\256c)h(invocations.)j(In)0 2502 y(this)9 b(way)
m(,)i(the)e(access)j(mediation)d(code)h(can)h(be)f(cleanly)g(separated)g(from)
g(the)f(implementation)g(of)g(the)h(item)g(themselves,)h(thereby)0 2552 y(pro\
viding)d(additional)h(con\256dence)i(in)f(the)g(correctness)h(of)f(the)h(syst\
em.)16 b(On)10 b(the)g(other)g(hand,)h(this)e(approach)i(creates)h(some)f(oth\
er)0 2602 y(dif)n(\256culties)k(with)e(respect)j(to)e(the)g(implementation)f
(of)i(items.)28 b(First,)16 b(the)e(concept)h(of)f(a)i(pointer)d(to)h(an)h
(item)g(within)d(a)k(server)0 2651 y(becomes)f(somewhat)f(muddled:)20 b(is)13
b(it)f(a)i(pointer)e(to)h(the)g(item)h(itself,)f(or)g(to)g(one)h(of)f(its)f
(agents?)25 b(Second,)15 b(when)e(code)h(internal)0 2701 y(to)d(an)h(item)g
(must)f(invoke)g(another)g(primitive)f(of)i(the)f(same)i(item,)g(should)d(it)
h(again)h(go)f(through)f(the)h(current)h(agent,)g(or)f(should)g(it)965 2807 y
(7)p eop
%%Page: 8 10
 bop 0 45 a fk(operate)11 b(on)g(the)g(item)f(directly?)17 b(In)10 b(practice\
,)i(this)e(complexity)g(is)h(a)g(cause)i(for)d(concern,)i(but)e(it)g(seems)j
(to)d(represent)h(complexity)0 95 y(that)f(would)f(have)i(occurred)f(independ\
ently)f(of)h(the)g(agent)g(model.)0 205 y fj(Keeping)h(track)g(of)f(the)h(act\
ive)f(bindings)62 283 y fk(Finally)l(,)h(to)f(complete)h(the)g(functional)e
(model)h(de\256ned)h(above,)g(it)f(must)h(be)f(possible)g(for)g(an)h(agency)g
(to)f(keep)i(track)e(of)g(the)h(set)0 333 y(of)g(active)h(agents)f(or)g(bindi\
ngs)f(that)h(currently)f(have)i(access)h(to)e(it.)18 b(In)11 b(the)g(default)
g(implementation,)g(this)f(is)h(realized)h(by)f(having)0 383 y(each)j(agent)e
(explicitly)f(register)h(and)h(un-register)e(itself)h(with)g(its)f(agency)j
(when)e(that)g(agent)h(is)f(created)i(or)e(destroyed.)22 b(All)12 b(that)0 432
y(such)e(a)g(registration)e(or)i(un-registration)d(call)j(needs)g(to)g(repres\
ent)g(the)f(information)f(associated)j(with)e(the)g(agent)h(is)g(the)f(per)o
(-thread)0 482 y(mediation)i(pointer)m(.)21 b(However)o(,)13 b(the)f(current)
g(speci\256cation)g(of)g(these)h(calls)f(contains)g(an)g(explicit)f(represent\
ation)h(of)g(the)g(access)0 532 y(rights)f(associated)h(with)f(the)h(agent.)
20 b(This)12 b(simpli\256es)f(the)h(implementations)f(of)h(agencies)h(that)e
(must)h(keep)g(track)g(of)g(the)f(current)0 582 y(maximum)g(active)f(access)j
(but)c(do)h(not)f(care)j(about)e(the)g(set)g(of)g(active)h(credentials;)e(thi\
s)h(is)g(by)g(far)g(the)g(most)g(common)h(case.)0 700 y fd(4.2)50 b(Underlyin\
g)11 b(Mechanisms)i(for)g(Communication)0 778 y fk(As)e(discussed)g(above,)h
(proxies)e(provide)g(a)i(convenient)e(indirection)f(between)i(clients)g(and)g
(the)g(remote)g(invocation)f(systems)h(and)0 828 y(constitute)g(the)i(only)f
(abstraction)g(that)g(is)h(visible)f(to)g(those)h(clients.)22 b(Underneath)13
b(this)f(level,)h(any)g(number)g(of)g(communication)0 878 y(mechanisms)i(may)
f(be)f(used.)25 b(However)n(,)15 b(unless)e(the)g(proxy)f(and)i(the)f(item)g
(manager)h(reside)g(in)f(the)g(same)h(address)g(space,)i(any)0 927 y(acceptab\
le)e(communication)d(mechanism)j(must)e(provide)f(some)i(minimal)f(guarantees)
h(with)e(respect)i(to)e(preserving)h(the)g(access)0 977 y(mediation)f(semanti\
cs)h(de\256ned)g(for)g(bindings.)17 b(In)12 b(this)f(view)m(,)h(it)f(is)h(use\
ful)f(for)g(the)h(complete)g(system)g(speci\256cation)g(to)f(de\256ne)h(at)0
1027 y(least)e(one)h(standard)f(general-purpose)g(communication)f(mechanism)j
(that)d(meets)j(all)d(the)i(requirements)f(outlined)e(above.)62 1077 y(The)h
(natural)e(approach)g(to)g(implement)h(the)f(low-level)g(communication)g(aspe\
ct)h(of)g(client-server)f(interactions)f(is)i(to)f(rely)g(on)g(the)0 1127 y
(Mach)i(IPC)f(system:)14 b(clients)7 b(hold)g(send-rights)g(to)h(ports)f(and)
i(item)f(managers)h(hold)e(receive)i(rights.)14 b(By)7 b(virtue)h(of)g(its)f
(speci\256cation)0 1177 y(based)15 b(on)f(secure)i(port)e(capabilities,)h(the)
f(Mach)h(IPC)g(facility)e(is)h(adequate)h(both)f(as)h(a)g(mechanism)h(for)e
(the)g(transport)g(of)g(raw)0 1226 y(data)e(between)h(address)f(spaces)i(and)
e(for)g(the)g(secure)h(representation)e(of)h(object)f(references)j([Draves90]\
.)21 b(Clients)10 b(cannot)i(for)o(ge)0 1276 y(send-rights,)h(and)g(therefore)
g(cannot)g(acquire)h(access)h(capabilities)d(that)h(have)g(not)g(been)g(expli\
citly)f(given)g(to)h(them)g(by)g(an)g(item)0 1326 y(manager)o(.)i(Conversely)
l(,)10 b(by)g(using)f(dif)n(ferent)h(ports)e(for)i(communication)f(with)f(dif)
o(ferent)h(clients,)h(an)g(item)g(manager)g(can)h(securely)0 1376 y(distingui\
sh)f(between)j(invocations)e(requests)i(from)g(these)g(dif)n(ferent)g(clients\
.)22 b(Furthermore,)14 b(when)e(forking,)g(these)i(send-rights)0 1426 y(can)c
(be)g(easily)g(given)f(to)g(a)h(child)f(by)h(its)f(parent)g(via)h(the)f(Mach)
i fg(port)q 13 2 v 13 w(insert)r 13 2 v 12 w(right\(\))d fk(operation.)14 b
(They)d(can)f(also)g(be)g(transferred)f(via)0 1475 y(Mach)i(IPC)g(to)f(any)h
(process,)h(child)e(or)g(otherwise.)17 b(NetIPC)10 b(software)h(from)g(the)f
(xKernel)h(project)f(at)h(the)g(University)e(of)h(Arizona)0 1525 y([Orman)129
1510 y ff(+)148 1525 y fk(93)o(])g(makes)i(the)e(port)f(semantics)i(available)
f(among)h(loosely)e(coupled)h(hosts.)0 1635 y fj(4.2.1)42 b(Ports)10 b(Identi\
fy:)15 b(Servers,)d(Clients,)f(and)f(Items)0 1713 y fk(Obviously)-5 b(,)11 b
(a)g(send-right)d(for)i(some)h(server)g(port)e(must)h(be)h(used)f(by)g(a)h
(proxy)e(for)g(shipping)g(invocations)g(to)g(its)h(server)n(.)15 b(However)o
(,)0 1763 y(there)e(are)g(two)f(other)g(problems)g(to)g(be)g(addressed)i(at)e
(this)g(point:)17 b(how)12 b(to)g(securely)h(identify)e(a)i(given)f(binding)e
(to)i(a)h(server)g(and)0 1813 y(how)d(to)g(identify)e(an)j(individual)c(item)
k(being)e(invoked)g(against.)62 1863 y(This)h(general)h(scheme)h(admits)e(thr\
ee)g(variations:)62 1946 y fe(\017)21 b fk(The)9 b(\252)p fg(port-per)o(-serv\
er)p fk(\272)i(option)6 b(would)i(use)h(one)g(server)g(port)e(to)h(receive)i
(all)e(of)g(a)h(given)f(servers)i(invocation)d(requests)h(from)104 1995 y(all)
h(of)h(its)g(clients.)k(Then,)d(in)f(each)h(request,)f(a)h fg(\252cr)o(edenti\
als)e(port\272)g fk(would)g(be)i(sent)f(to)f(identify)g(the)g(client/user)h
(and)g(ensure)104 2045 y(security)m(.)17 b(Also,)12 b(a)f(\252binding)f(handl\
e\272)h(would)f(be)h(sent)g(to)g(identify)e(individual)g(bindings)g(within)g
(the)i(server)n(.)18 b(This)11 b(handle)104 2095 y(can)g(be)f(a)h(simple)f
(unsecure)h(number)f(and)h(could)e(be)i(veri\256ed)f(by)g(the)g(server)h(in)e
(the)i(context)e(of)h(the)g(credentials)g(port.)62 2178 y fe(\017)21 b fk(The)
11 b(\252)p fg(port-per)o(-pair)p fk(\272)g(option)e(would)g(use)j(a)f(port)f
(for)g(each)i(client-server)e(pair)n(.)17 b(Again,)11 b(a)g(binding)e(handle)
h(would)g(be)h(sent)104 2228 y(to)i(identify)e(individual)g(bindings)h(within)
g(that)h(server)n(.)25 b(This)13 b(handle)h(is)f(secure)i(since)f(it)e(can)i
(only)f(be)h(received)g(via)f(the)104 2278 y(client-server)d(port.)62 2361 y
fe(\017)21 b fk(Finally)l(,)10 b(the)h(\252)p fg(port-per)o(-binding)p fk(\
\272)d(option)h(would)g(represent)h(each)i(binding)c(with)h(a)i(dif)n(ferent)
f(port.)62 2444 y(Each)f(of)e(these)h(variations)e(can)i(provide)e(the)i(requ\
ired)f(functionality)t(and)h(has)g(been)f(used)h(in)f(various)g(message-based)
i(systems.)0 2494 y(The)i(choice)g(among)f(them)g(is)g(governed)g(by)g(consid\
erations)f(of)h(transfer)h(of)e(bindings,)g(overall)h(system)h(complexity)l
(,)f(and)h(speed.)965 2807 y(8)p eop
%%Page: 9 11
 bop 0 45 a fj(Port-per-server)62 123 y fk(While)9 b(this)f(approach)h(is)g
(ar)o(guably)f(the)h(natural)f(way)h(programmers)h(like)e(to)g(think)g(of)g
(client-server)h(interactions,)f(it)g(has)h(some)0 173 y(problems.)25 b(T)m
(o)14 b(transfer)f(a)h(binding)e(to)h(another)g(client,)h(it)f(is)g(necessary)
i(either)e(to)g(transfer)h(the)f(clients)g(credentials)h(port)e(or)i(to)0 222
y(cause)e(the)e(tar)o(get)g(client)g(to)g(re-acquire)g(the)h(binding)d(with)h
(its)h(own)g(credentials)g(port.)15 b(This)10 b(may)h(be)g(no)f(problem)g(for)
g(inheritance)0 272 y(where)h(the)g(child)f(could)g(have)i(the)f(same)h(crede\
ntials)f(port)f(as)h(the)g(parent.)17 b(But)10 b(transferring)g(a)h(credentia\
ls)g(port)f(to)g(a)h(third-party)0 322 y(task)h(would)e(make)j(it)e(easy)i
(for)e(any)h(binding)e(guarded)h(by)g(the)h(credentials)g(port)e(to)i(be)g
(spoofed)f(by)g(the)h(other)f(task.)20 b(Restricting)0 372 y(the)11 b(credent\
ials)h(port)e(to)h(guard)g(fewer)h(bindings)d(quickly)h(deteriorates)h(into)f
(something)h(with)f(functionality)f(approaching)h(port-)0 422 y(per)o(-pair)j
(or)g(port-per)n(-binding.)22 b(That)14 b(functionality)d(would)h(have)i(much)
g(more)f(complex)h(semantics)g(invalidating)d(the)i(simple)0 472 y(method)i
(call)g(model)g(for)g(invocation)e(transparency)n(.)30 b(It)14 b(also)i(raise\
s)f(questions)g(of)f(how)h(to)g(coordinate,)h(among)f(servers)h(and)0 521 y
(clients,)10 b(the)f(creation)g(of)h(such)f(a)i(restricted)e(credentials)g
(port.)14 b(Alternately)l(,)c(re-acquisition)e(of)i(the)f(binding)f(with)g
(the)i(tar)o(get)f(tasks)0 571 y(credentials)h(may)h(be)g(impossible,)f(thus)
g(restricting)f(the)h(way)h(items)f(may)i(be)e(shared.)17 b(Third-party)9 b
(sharing)g(of)i(bindings)d(without)0 621 y(re-acquisition)h(is)h(almost)g(req\
uired)f(for)h(UNIX)g fg(setuid)g(exec)i fk(and)e(is)g(a)h(generally)f(useful)
g(mechanism.)62 671 y(A)h(serious)g(problem)g(with)f(using)g(a)i(credentials)
f(port)f(to)g(supply)g(identity)f(guarantees)j(with)e(each)i(message)h(is)e
(speed.)18 b(In)11 b(any)0 721 y(optimized)g(system)h(or)g(kernel,)g(transfer)
g(of)f(regular)g(data)h(will)f(be)h(faster)g(than)f(transfer)h(of)g(secure)g
(data.)20 b(Hence,)14 b(shipping)c(such)0 770 y(a)j(port)f(in)f(every)i(messa\
ge)i(would)c(be)i(costly)l(.)22 b(It)12 b(is)h(better)f(for)g(a)h(server)g
(to)f(get)g(its)g(client)g(identity)e(assurances)k(based)g(upon)d(the)0 820 y
(port)e(from)g(which)h(it)f(receives)h(a)h(message,)h(not)d(on)g(what)h(is)f
(in)g(that)g(message.)17 b(In)10 b(that)f(way)m(,)i(the)e(security)h(costs)f
(are)i(incurred)e(only)0 870 y(when)h(a)h(binding)d(is)i(created)i(using)d
(new)h(credentials.)0 980 y fj(Port-per-pair)62 1058 y fk(This)15 b(approach)
g(avoids)g(the)f(credentials)h(port)f(transfer)h(costs.)29 b(Y)l(et)15 b(it)f
(suf)o(fers)h(from)f(some)i(problems)e(when)h(transferring)0 1108 y(bindings)
c(between)j(processes.)26 b(As)13 b(in)g(the)g(port-per)n(-server)h(case,)i
(a)e(client)e(cannot)i(safely)f(ship)g(a)h(proxy')l(s)g(send-right)d(for)i
(the)0 1158 y(server)f(to)e(a)i(third-party)d(process.)19 b(That)11 b(process)
h(would)e(be)i(able)f(to)g(access)i(any)f(of)f(the)g(\256rst)g(client')l(s)h
(bindings)d(to)i(the)g(server)h(in)0 1207 y(question.)i(Port-per)n(-pair)c
(also)g(cannot)g(handle)g(third-party)e(sharing.)62 1257 y(There)k(is)f(also)
g(a)h(problem)e(with)h(proxy)f(inheritance.)17 b(If)11 b(a)g(parent)g(does)h
(not)e(share)i(its)e(server-ports)g(with)g(its)g(child,)h(then)g(that)0 1307 y
(child)g(would)f(need)i(to)f(re-acquire)h(all)f(of)g(its)g(bindings)f(with)g
(each)j(of)e(its)g(servers.)20 b(Y)-5 b(et)12 b(sharing)f(them)g(leaves)i(all)
e(of)g(the)h(parent')m(s)0 1357 y(bindings)c(available)i(to)g(the)g(child,)f
(not)g(just)h(the)g(one)g(the)g(parent)g(wants)g(to)f(share,)i(even)g(ones)f
(that)g(do)f(not)g(exist)h(when)g(the)g(child)f(is)0 1407 y(created.)0 1517 y
fj(Port-per-binding)62 1595 y fk(This)k(approach)h(clearly)f(has)h(the)f(best)
g(granularity)-5 b(.)25 b(A)13 b(binding)e(can)j(be)f(shared)h(with)e(a)i(chi\
ld)e(or)h(third-party)e(without)g(any)0 1644 y(possibility)f(of)i(spoo\256ng)
g(another)g(binding.)21 b(The)13 b(port)f(which)g(represents)h(the)g(binding)
d(represents)j(exactly)g(one)g(item,)g(making)0 1694 y(request)g(multiplexing)
d(simple.)23 b(It)13 b(also)g(has)g(some)h(garbage-collection)e(advantages)h
(\(see)h(section)f(4.3.\))23 b(While)12 b(it)g(is)h(true)g(that)0 1744 y(ther\
e)d(are)h(many)g(more)g(ports)e(needed)i(for)f(this)f(method,)h(ports)g(thems\
elves)h(are)g(fairly)e(inexpensive)h(in)f(Mach.)62 1794 y(Because)j(of)e(the)
g(above)h(considerations,)e(Mach-US)i(uses)g(a)g(port-per)m(-binding)d(implem\
entation.)62 1844 y(The)j(structure)f(of)g(the)g(remote)h(invocation)d(system)
j(is)f(shown)g(in)f(\256gure)i(1.)0 1962 y fd(4.3)50 b(Garbage-Collection)0
2040 y fj(4.3.1)42 b(Backgr)o(ound)0 2118 y fk(Inside)11 b(a)g(single)g(addre\
ss)h(space,)h(the)e(most)g(practical)g(mechanism)h(available)f(for)g(garbage-\
collection)f(with)g(the)h(current)g(state)g(of)0 2167 y(language)e(facilities)
g(under)f(Mach)i(is)f(reference)i(counts[Draves90)o(].)k(Such)10 b(a)g(mechan\
ism)g(has)g(amply)f(proved)f(its)h(adequacy)h(with)0 2217 y(other)g(Mach)i
(applications)e(and)h(even)g(within)f(the)g(Mach)i(kernel)f(itself.)16 b(Give\
n)11 b(that)f(the)h(primary)g(goal)f(of)h(the)g(present)g(project)f(is)0 2267
y(to)f(construct)f(a)i(framework)g(for)f(emulation)f(in)h(a)h(multi-task)d
(environment,)i(and)h(not)e(to)h(advance)h(the)g(state)f(of)g(language)g(rese\
arch,)0 2317 y(we)i(have)g(decided)f(to)g(use)g(this)g(same)h(technique)f(wit\
hin)f(the)h(emulation)f(framework.)62 2367 y(The)g(invocation)e(facility)h
(is)g(responsible)f(for)i(extending)e(the)h(concept)h(of)f(reference)i(counts)
e(across)h(client-server)f(boundaries.)0 2417 y(In)k(other)h(words,)g(if)f
(a)h(proxy)f(in)g(a)i(client')l(s)f(address)h(space)g(has)f(access)i(to)d(an)
h(item)g(through)e(an)i(agent,)h(the)e(invocation)f(facility)0 2466 y(must)i
(implement)f(a)i fg(logical)d(r)o(efer)o(ence)j fk(from)f(that)f(proxy)g(to)g
(that)g(agent.)23 b(In)13 b(the)g(context)f(of)h(the)f(local)h(reference)i
(counts)d(used)0 2516 y(for)f(intra-server)g(implementation,)f(this)h(logical)
f(reference)j(corresponds)e(to)f(a)i(local)f(reference)i(held)e(by)g(the)g
(remote)h(invocation)0 2566 y(system)k(for)f(the)g(agent,)i(to)e(be)g(release\
d)i(when)e(that)g(agent)h(is)f(no)g(longer)f(accessible)j(from)e(the)g(outsid\
e)g(through)f(the)h(remote)0 2616 y(invocation)d(system.)24 b(In)13 b(turn,)g
(the)h(agent)f(normally)f(holds)g(a)i(local)f(reference)i(to)e(the)g(agency)m
(,)i(thereby)e(ensuring)f(that)h(an)g(item)0 2666 y(remains)c(accessible)i
(inside)d(the)h(server)g(as)h(long)e(as)i(it)e(has)h(active)g(bindings.)k(Sin\
ce)d(we)f(are)h(not)e(distinguishing)d(between)10 b(multiple)965 2807 y(9)p
eop
%%Page: 10 12
 bop 0 1067 a @beginspecial -20 @hoffset 290 @voffset 0.650000 @hscale
0.550000 @vscale -90 @angle @setspecial
%%BeginDocument: rmi.ps
/FMversion (3.0) def 
	/FMPrintInColor systemdict /colorimage known
		systemdict /currentcolortransfer known or def
/FrameDict 195 dict def 
systemdict /errordict known not {/errordict 10 dict def
		errordict /rangecheck {stop} put} if
FrameDict /tmprangecheck errordict /rangecheck get put 
errordict /rangecheck {FrameDict /bug true put} put 
FrameDict /bug false put 
mark 
currentfile 5 string readline
00
0000000000
cleartomark 
errordict /rangecheck FrameDict /tmprangecheck get put 
FrameDict /bug get { 
	/readline {
		/gstring exch def
		/gfile exch def
		/gindex 0 def
		{
			gfile read pop 
			dup 10 eq {exit} if 
			dup 13 eq {exit} if 
			gstring exch gindex exch put 
			/gindex gindex 1 add def 
		} loop
		pop 
		gstring 0 gindex getinterval true 
		} def
	} if
/FMVERSION {
	FMversion ne {
		/Times-Roman findfont 18 scalefont setfont
		100 100 moveto
		(FrameMaker version does not match postscript_prolog!)
		dup =
		show showpage
		} if
	} def 
/FMLOCAL {
	FrameDict begin
	0 def 
	end 
	} def 
	/gstring FMLOCAL
	/gfile FMLOCAL
	/gindex FMLOCAL
	/orgxfer FMLOCAL
	/orgproc FMLOCAL
	/organgle FMLOCAL
	/orgfreq FMLOCAL
	/yscale FMLOCAL
	/xscale FMLOCAL
	/manualfeed FMLOCAL
	/paperheight FMLOCAL
	/paperwidth FMLOCAL
/FMDOCUMENT { 
	array /FMfonts exch def 
	/#copies exch def
	FrameDict begin
	0 ne dup {setmanualfeed} if
	/manualfeed exch def
	/paperheight exch def
	/paperwidth exch def
	/yscale exch def
	/xscale exch def
	currenttransfer cvlit /orgxfer exch def
	currentscreen cvlit /orgproc exch def
	/organgle exch def /orgfreq exch def
	setpapername 
	desperatepapersize
	end 
	} def 
	/pagesave FMLOCAL
	/orgmatrix FMLOCAL
	/landscape FMLOCAL
/FMBEGINPAGE { 
	FrameDict begin 
	/pagesave save def
	3.86 setmiterlimit
	/landscape exch 0 ne def
	landscape { 
		90 rotate 0 exch neg translate pop 
		}
		{pop pop}
		ifelse
	xscale yscale scale
	/orgmatrix matrix def
	gsave 
	} def 
/FMENDPAGE {
	grestore 
	pagesave restore
	end 
	showpage
	} def 
/FMFONTDEFINE { 
	FrameDict begin
	findfont 
	ReEncode 
	1 index exch 
	definefont 
	FMfonts 3 1 roll 
	put
	end 
	} def 
/FMFILLS {
	FrameDict begin
	array /fillvals exch def
	end 
	} def 
/FMFILL {
	FrameDict begin
	 fillvals 3 1 roll put
	end 
	} def 
/FMNORMALIZEGRAPHICS { 
	newpath
	0.0 0.0 moveto
	1 setlinewidth
	0 setlinecap
	0 0 0 sethsbcolor
	0 setgray 
	} bind def
	/fx FMLOCAL
	/fy FMLOCAL
	/fh FMLOCAL
	/fw FMLOCAL
	/llx FMLOCAL
	/lly FMLOCAL
	/urx FMLOCAL
	/ury FMLOCAL
/FMBEGINEPSF { 
	end 
	/FMEPSF save def 
	/showpage {} def 
	FMNORMALIZEGRAPHICS 
	[/fy /fx /fh /fw /ury /urx /lly /llx] {exch def} forall 
	fx fy translate 
	rotate
	fw urx llx sub div fh ury lly sub div scale 
	llx neg lly neg translate 
	} bind def
/FMENDEPSF {
	FMEPSF restore
	FrameDict begin 
	} bind def
FrameDict begin 
/setmanualfeed {
	 statusdict /manualfeed true put
	} def
/max {2 copy lt {exch} if pop} bind def
/min {2 copy gt {exch} if pop} bind def
/inch {72 mul} def
/pagedimen { 
	paperheight sub abs 16 lt exch 
	paperwidth sub abs 16 lt and
	{/papername exch def} {pop} ifelse
	} def
	/papersizedict FMLOCAL
/setpapername { 
	/papersizedict 14 dict def 
	papersizedict begin
	/papername /unknown def 
		/Letter 8.5 inch 11.0 inch pagedimen
		/LetterSmall 7.68 inch 10.16 inch pagedimen
		/Tabloid 11.0 inch 17.0 inch pagedimen
		/Ledger 17.0 inch 11.0 inch pagedimen
		/Legal 8.5 inch 14.0 inch pagedimen
		/Statement 5.5 inch 8.5 inch pagedimen
		/Executive 7.5 inch 10.0 inch pagedimen
		/A3 11.69 inch 16.5 inch pagedimen
		/A4 8.26 inch 11.69 inch pagedimen
		/A4Small 7.47 inch 10.85 inch pagedimen
		/B4 10.125 inch 14.33 inch pagedimen
		/B5 7.16 inch 10.125 inch pagedimen
	end
	} def
/papersize {
	papersizedict begin
		/Letter {lettertray letter} def
		/LetterSmall {lettertray lettersmall} def
		/Tabloid {11x17tray 11x17} def
		/Ledger {ledgertray ledger} def
		/Legal {legaltray legal} def
		/Statement {statementtray statement} def
		/Executive {executivetray executive} def
		/A3 {a3tray a3} def
		/A4 {a4tray a4} def
		/A4Small {a4tray a4small} def
		/B4 {b4tray b4} def
		/B5 {b5tray b5} def
		/unknown {unknown} def
	papersizedict dup papername known {papername} {/unknown} ifelse get
	end
	/FMdicttop countdictstack 1 add def 
	statusdict begin stopped end 
	countdictstack -1 FMdicttop {pop end} for 
	} def
/manualpapersize {
	papersizedict begin
		/Letter {letter} def
		/LetterSmall {lettersmall} def
		/Tabloid {11x17} def
		/Ledger {ledger} def
		/Legal {legal} def
		/Statement {statement} def
		/Executive {executive} def
		/A3 {a3} def
		/A4 {a4} def
		/A4Small {a4small} def
		/B4 {b4} def
		/B5 {b5} def
		/unknown {unknown} def
	papersizedict dup papername known {papername} {/unknown} ifelse get
	end
	stopped 
	} def
/desperatepapersize {
	statusdict /setpageparams known
		{
		paperwidth paperheight 0 1 
		statusdict begin
		{setpageparams} stopped pop 
		end
		} if
	} def
/savematrix {
	orgmatrix currentmatrix pop
	} bind def
/restorematrix {
	orgmatrix setmatrix
	} bind def
/dmatrix matrix def
/dpi    72 0 dmatrix defaultmatrix dtransform
    dup mul exch   dup mul add   sqrt def
/freq dpi 18.75 div 8 div round dup 0 eq {pop 1} if 8 mul dpi exch div def
/sangle 1 0 dmatrix defaultmatrix dtransform exch atan def
/DiacriticEncoding [
/.notdef /.notdef /.notdef /.notdef /.notdef /.notdef /.notdef
/.notdef /.notdef /.notdef /.notdef /.notdef /.notdef /.notdef
/.notdef /.notdef /.notdef /.notdef /.notdef /.notdef /.notdef
/.notdef /.notdef /.notdef /.notdef /.notdef /.notdef /.notdef
/.notdef /.notdef /.notdef /.notdef /space /exclam /quotedbl
/numbersign /dollar /percent /ampersand /quotesingle /parenleft
/parenright /asterisk /plus /comma /hyphen /period /slash /zero /one
/two /three /four /five /six /seven /eight /nine /colon /semicolon
/less /equal /greater /question /at /A /B /C /D /E /F /G /H /I /J /K
/L /M /N /O /P /Q /R /S /T /U /V /W /X /Y /Z /bracketleft /backslash
/bracketright /asciicircum /underscore /grave /a /b /c /d /e /f /g /h
/i /j /k /l /m /n /o /p /q /r /s /t /u /v /w /x /y /z /braceleft /bar
/braceright /asciitilde /.notdef /Adieresis /Aring /Ccedilla /Eacute
/Ntilde /Odieresis /Udieresis /aacute /agrave /acircumflex /adieresis
/atilde /aring /ccedilla /eacute /egrave /ecircumflex /edieresis
/iacute /igrave /icircumflex /idieresis /ntilde /oacute /ograve
/ocircumflex /odieresis /otilde /uacute /ugrave /ucircumflex
/udieresis /dagger /.notdef /cent /sterling /section /bullet
/paragraph /germandbls /registered /copyright /trademark /acute
/dieresis /.notdef /AE /Oslash /.notdef /.notdef /.notdef /.notdef
/yen /.notdef /.notdef /.notdef /.notdef /.notdef /.notdef
/ordfeminine /ordmasculine /.notdef /ae /oslash /questiondown
/exclamdown /logicalnot /.notdef /florin /.notdef /.notdef
/guillemotleft /guillemotright /ellipsis /.notdef /Agrave /Atilde
/Otilde /OE /oe /endash /emdash /quotedblleft /quotedblright
/quoteleft /quoteright /.notdef /.notdef /ydieresis /Ydieresis
/fraction /currency /guilsinglleft /guilsinglright /fi /fl /daggerdbl
/periodcentered /quotesinglbase /quotedblbase /perthousand
/Acircumflex /Ecircumflex /Aacute /Edieresis /Egrave /Iacute
/Icircumflex /Idieresis /Igrave /Oacute /Ocircumflex /.notdef /Ograve
/Uacute /Ucircumflex /Ugrave /dotlessi /circumflex /tilde /macron
/breve /dotaccent /ring /cedilla /hungarumlaut /ogonek /caron
] def
/ReEncode { 
	dup 
	length 
	dict begin 
	{
	1 index /FID ne 
		{def} 
		{pop pop} ifelse 
	} forall 
	0 eq {/Encoding DiacriticEncoding def} if 
	currentdict 
	end 
	} bind def
/graymode true def
	/bwidth FMLOCAL
	/bpside FMLOCAL
	/bstring FMLOCAL
	/onbits FMLOCAL
	/offbits FMLOCAL
	/xindex FMLOCAL
	/yindex FMLOCAL
	/x FMLOCAL
	/y FMLOCAL
/setpattern {
	 /bwidth  exch def
	 /bpside  exch def
	 /bstring exch def
	 /onbits 0 def  /offbits 0 def
	 freq sangle landscape {90 add} if 
		{/y exch def
		 /x exch def
		 /xindex x 1 add 2 div bpside mul cvi def
		 /yindex y 1 add 2 div bpside mul cvi def
		 bstring yindex bwidth mul xindex 8 idiv add get
		 1 7 xindex 8 mod sub bitshift and 0 ne
		 {/onbits  onbits  1 add def 1}
		 {/offbits offbits 1 add def 0}
		 ifelse
		}
		setscreen
	 {} settransfer
	 offbits offbits onbits add div FMsetgray
	/graymode false def
	} bind def
/grayness {
	FMsetgray
	graymode not {
		/graymode true def
		orgxfer cvx settransfer
		orgfreq organgle orgproc cvx setscreen
		} if
	} bind def
	/HUE FMLOCAL
	/SAT FMLOCAL
	/BRIGHT FMLOCAL
	/Colors FMLOCAL
FMPrintInColor 
	
	{
	/HUE 0 def
	/SAT 0 def
	/BRIGHT 0 def
	% array of arrays Hue and Sat values for the separations [HUE BRIGHT]
	/Colors   
	[[0    0  ]    % black
	 [0    0  ]    % white
	 [0.00 1.0]    % red
	 [0.37 1.0]    % green
	 [0.60 1.0]    % blue
	 [0.50 1.0]    % cyan
	 [0.83 1.0]    % magenta
	 [0.16 1.0]    % comment / yellow
	 ] def
      
	/BEGINBITMAPCOLOR { 
		BITMAPCOLOR} def
	/BEGINBITMAPCOLORc { 
		BITMAPCOLORc} def
	/BEGINBITMAPTRUECOLOR { 
		BITMAPTRUECOLOR } def
	/BEGINBITMAPTRUECOLORc { 
		BITMAPTRUECOLORc } def
	/K { 
		Colors exch get dup
		0 get /HUE exch store 
		1 get /BRIGHT exch store
		  HUE 0 eq BRIGHT 0 eq and
			{1.0 SAT sub setgray}
			{HUE SAT BRIGHT sethsbcolor} 
		  ifelse
		} def
	/FMsetgray { 
		/SAT exch 1.0 exch sub store 
		  HUE 0 eq BRIGHT 0 eq and
			{1.0 SAT sub setgray}
			{HUE SAT BRIGHT sethsbcolor} 
		  ifelse
		} bind def
	}
	
	{
	/BEGINBITMAPCOLOR { 
		BITMAPGRAY} def
	/BEGINBITMAPCOLORc { 
		BITMAPGRAYc} def
	/BEGINBITMAPTRUECOLOR { 
		BITMAPTRUEGRAY } def
	/BEGINBITMAPTRUECOLORc { 
		BITMAPTRUEGRAYc } def
	/FMsetgray {setgray} bind def
	/K { 
		pop
		} def
	}
ifelse
/normalize {
	transform round exch round exch itransform
	} bind def
/dnormalize {
	dtransform round exch round exch idtransform
	} bind def
/lnormalize { 
	0 dtransform exch cvi 2 idiv 2 mul 1 add exch idtransform pop
	} bind def
/H { 
	lnormalize setlinewidth
	} bind def
/Z {
	setlinecap
	} bind def
	/fillvals FMLOCAL
/X { 
	fillvals exch get
	dup type /stringtype eq
	{8 1 setpattern} 
	{grayness}
	ifelse
	} bind def
/V { 
	gsave eofill grestore
	} bind def
/N { 
	stroke
	} bind def
/M {newpath moveto} bind def
/E {lineto} bind def
/D {curveto} bind def
/O {closepath} bind def
	/n FMLOCAL
/L { 
 	/n exch def
	newpath
	normalize
	moveto 
	2 1 n {pop normalize lineto} for
	} bind def
/Y { 
	L 
	closepath
	} bind def
	/x1 FMLOCAL
	/x2 FMLOCAL
	/y1 FMLOCAL
	/y2 FMLOCAL
	/rad FMLOCAL
/R { 
	/y2 exch def
	/x2 exch def
	/y1 exch def
	/x1 exch def
	x1 y1
	x2 y1
	x2 y2
	x1 y2
	4 Y 
	} bind def
/RR { 
	/rad exch def
	normalize
	/y2 exch def
	/x2 exch def
	normalize
	/y1 exch def
	/x1 exch def
	newpath
	x1 y1 rad add moveto
	x1 y2 x2 y2 rad arcto
	x2 y2 x2 y1 rad arcto
	x2 y1 x1 y1 rad arcto
	x1 y1 x1 y2 rad arcto
	closepath
	16 {pop} repeat
	} bind def
/C { 
	grestore
	gsave
	R 
	clip
	} bind def
	/FMpointsize FMLOCAL
/F { 
	FMfonts exch get
	FMpointsize scalefont
	setfont
	} bind def
/Q { 
	/FMpointsize exch def
	F 
	} bind def
/T { 
	moveto show
	} bind def
/RF { 
	rotate
	0 ne {-1 1 scale} if
	} bind def
/TF { 
	gsave
	moveto 
	RF
	show
	grestore
	} bind def
/P { 
	moveto
	0 32 3 2 roll widthshow
	} bind def
/PF { 
	gsave
	moveto 
	RF
	0 32 3 2 roll widthshow
	grestore
	} bind def
/S { 
	moveto
	0 exch ashow
	} bind def
/SF { 
	gsave
	moveto
	RF
	0 exch ashow
	grestore
	} bind def
/B { 
	moveto
	0 32 4 2 roll 0 exch awidthshow
	} bind def
/BF { 
	gsave
	moveto
	RF
	0 32 4 2 roll 0 exch awidthshow
	grestore
	} bind def
/G { 
	gsave
	newpath
	normalize translate 0.0 0.0 moveto 
	dnormalize scale 
	0.0 0.0 1.0 5 3 roll arc 
	closepath fill
	grestore
	} bind def
/A { 
	gsave
	savematrix
	newpath
	2 index 2 div add exch 3 index 2 div sub exch 
	normalize 2 index 2 div sub exch 3 index 2 div add exch 
	translate 
	scale 
	0.0 0.0 1.0 5 3 roll arc 
	restorematrix
	stroke
	grestore
	} bind def
	/x FMLOCAL
	/y FMLOCAL
	/w FMLOCAL
	/h FMLOCAL
	/xx FMLOCAL
	/yy FMLOCAL
	/ww FMLOCAL
	/hh FMLOCAL
	/FMsaveobject FMLOCAL
	/FMoptop FMLOCAL
	/FMdicttop FMLOCAL
/BEGINPRINTCODE { 
	/FMdicttop countdictstack 1 add def 
	/FMoptop count 4 sub def 
	/FMsaveobject save def
	userdict begin 
	/showpage {} def 
	FMNORMALIZEGRAPHICS 
	3 index neg 3 index neg translate
	} bind def
/ENDPRINTCODE {
	count -1 FMoptop {pop pop} for 
	countdictstack -1 FMdicttop {pop end} for 
	FMsaveobject restore 
	} bind def
/gn { 
	0 
	{	46 mul 
		cf read pop 
		32 sub 
		dup 46 lt {exit} if 
		46 sub add 
		} loop
	add 
	} bind def
	/str FMLOCAL
/cfs { 
	/str sl string def 
	0 1 sl 1 sub {str exch val put} for 
	str def 
	} bind def
/ic [ 
	0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0223
	0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0223
	0
	{0 hx} {1 hx} {2 hx} {3 hx} {4 hx} {5 hx} {6 hx} {7 hx} {8 hx} {9 hx}
	{10 hx} {11 hx} {12 hx} {13 hx} {14 hx} {15 hx} {16 hx} {17 hx} {18 hx}
	{19 hx} {gn hx} {0} {1} {2} {3} {4} {5} {6} {7} {8} {9} {10} {11} {12}
	{13} {14} {15} {16} {17} {18} {19} {gn} {0 wh} {1 wh} {2 wh} {3 wh}
	{4 wh} {5 wh} {6 wh} {7 wh} {8 wh} {9 wh} {10 wh} {11 wh} {12 wh}
	{13 wh} {14 wh} {gn wh} {0 bl} {1 bl} {2 bl} {3 bl} {4 bl} {5 bl} {6 bl}
	{7 bl} {8 bl} {9 bl} {10 bl} {11 bl} {12 bl} {13 bl} {14 bl} {gn bl}
	{0 fl} {1 fl} {2 fl} {3 fl} {4 fl} {5 fl} {6 fl} {7 fl} {8 fl} {9 fl}
	{10 fl} {11 fl} {12 fl} {13 fl} {14 fl} {gn fl}
	] def
	/sl FMLOCAL
	/val FMLOCAL
	/ws FMLOCAL
	/im FMLOCAL
	/bs FMLOCAL
	/cs FMLOCAL
	/len FMLOCAL
	/pos FMLOCAL
/ms { 
	/sl exch def 
	/val 255 def 
	/ws cfs 
	/im cfs 
	/val 0 def 
	/bs cfs 
	/cs cfs 
	} bind def
400 ms 
/ip { 
	is 
	0 
	cf cs readline pop 
	{	ic exch get exec 
		add 
		} forall 
	pop 
	
	} bind def
/wh { 
	/len exch def 
	/pos exch def 
	ws 0 len getinterval im pos len getinterval copy pop
	pos len 
	} bind def
/bl { 
	/len exch def 
	/pos exch def 
	bs 0 len getinterval im pos len getinterval copy pop
	pos len 
	} bind def
/s1 1 string def
/fl { 
	/len exch def 
	/pos exch def 
	/val cf s1 readhexstring pop 0 get def
	pos 1 pos len add 1 sub {im exch val put} for
	pos len 
	} bind def
/hx { 
	3 copy getinterval 
	cf exch readhexstring pop pop 
	} bind def
	/h FMLOCAL
	/w FMLOCAL
	/d FMLOCAL
	/lb FMLOCAL
	/bitmapsave FMLOCAL
	/is FMLOCAL
	/cf FMLOCAL
/wbytes { 
	dup 
	8 eq {pop} {1 eq {7 add 8 idiv} {3 add 4 idiv} ifelse} ifelse
	} bind def
/BEGINBITMAPBWc { 
	1 {} COMMONBITMAPc
	} bind def
/BEGINBITMAPGRAYc { 
	8 {} COMMONBITMAPc
	} bind def
/BEGINBITMAP2BITc { 
	2 {} COMMONBITMAPc
	} bind def
/COMMONBITMAPc { 
	/r exch def
	/d exch def
	gsave
	translate rotate scale /h exch def /w exch def
	/lb w d wbytes def 
	sl lb lt {lb ms} if 
	/bitmapsave save def 
	r                    
	/is im 0 lb getinterval def 
	ws 0 lb getinterval is copy pop 
	/cf currentfile def 
	w h d [w 0 0 h neg 0 h] 
	{ip} image 
	bitmapsave restore 
	grestore
	} bind def
/BEGINBITMAPBW { 
	1 {} COMMONBITMAP
	} bind def
/BEGINBITMAPGRAY { 
	8 {} COMMONBITMAP
	} bind def
/BEGINBITMAP2BIT { 
	2 {} COMMONBITMAP
	} bind def
/COMMONBITMAP { 
	/r exch def
	/d exch def
	gsave
	translate rotate scale /h exch def /w exch def
	/bitmapsave save def 
	r                    
	/is w d wbytes string def
	/cf currentfile def 
	w h d [w 0 0 h neg 0 h] 
	{cf is readhexstring pop} image
	bitmapsave restore 
	grestore
	} bind def
	/proc1 FMLOCAL
	/proc2 FMLOCAL
	/newproc FMLOCAL
/Fmcc {
    /proc2 exch cvlit def
    /proc1 exch cvlit def
    /newproc proc1 length proc2 length add array def
    newproc 0 proc1 putinterval
    newproc proc1 length proc2 putinterval
    newproc cvx
} bind def
/ngrayt 256 array def
/nredt 256 array def
/nbluet 256 array def
/ngreent 256 array def
	/gryt FMLOCAL
	/blut FMLOCAL
	/grnt FMLOCAL
	/redt FMLOCAL
	/indx FMLOCAL
	/cynu FMLOCAL
	/magu FMLOCAL
	/yelu FMLOCAL
	/k FMLOCAL
	/u FMLOCAL
/colorsetup {
	currentcolortransfer
	/gryt exch def
	/blut exch def
	/grnt exch def
	/redt exch def
	0 1 255 {
		/indx exch def
		/cynu 1 red indx get 255 div sub def
		/magu 1 green indx get 255 div sub def
		/yelu 1 blue indx get 255 div sub def
		/k cynu magu min yelu min def
		/u k currentundercolorremoval exec def
		nredt indx 1 0 cynu u sub max sub redt exec put
		ngreent indx 1 0 magu u sub max sub grnt exec put
		nbluet indx 1 0 yelu u sub max sub blut exec put
		ngrayt indx 1 k currentblackgeneration exec sub gryt exec put
	} for
	{255 mul cvi nredt exch get}
	{255 mul cvi ngreent exch get}
	{255 mul cvi nbluet exch get}
	{255 mul cvi ngrayt exch get}
	setcolortransfer
	{pop 0} setundercolorremoval
	{} setblackgeneration
	} bind def
	/tran FMLOCAL
/fakecolorsetup {
	/tran 256 string def
	0 1 255 {/indx exch def 
		tran indx
		red indx get 77 mul
		green indx get 151 mul
		blue indx get 28 mul
		add add 256 idiv put} for
	currenttransfer
	{255 mul cvi tran exch get 255.0 div}
	exch Fmcc settransfer
} bind def
/BITMAPCOLOR { 
	/d 8 def
	gsave
	translate rotate scale /h exch def /w exch def
	/bitmapsave save def 
	colorsetup
	/is w d wbytes string def
	/cf currentfile def 
	w h d [w 0 0 h neg 0 h] 
	{cf is readhexstring pop} {is} {is} true 3 colorimage 
	bitmapsave restore 
	grestore
	} bind def
/BITMAPCOLORc { 
	/d 8 def
	gsave
	translate rotate scale /h exch def /w exch def
	/lb w d wbytes def 
	sl lb lt {lb ms} if 
	/bitmapsave save def 
	colorsetup
	/is im 0 lb getinterval def 
	ws 0 lb getinterval is copy pop 
	/cf currentfile def 
	w h d [w 0 0 h neg 0 h] 
	{ip} {is} {is} true 3 colorimage
	bitmapsave restore 
	grestore
	} bind def
/BITMAPTRUECOLORc { 
        gsave
        translate rotate scale /h exch def /w exch def
        /bitmapsave save def 
        
        /is w string def
        
        ws 0 w getinterval is copy pop 
        /cf currentfile def 
        w h 8 [w 0 0 h neg 0 h] 
        {ip} {gip} {bip} true 3 colorimage
        bitmapsave restore 
        grestore
        } bind def
/BITMAPTRUECOLOR { 
        gsave
        translate rotate scale /h exch def /w exch def
        /bitmapsave save def 
        /is w string def
        /gis w string def
        /bis w string def
        /cf currentfile def 
        w h 8 [w 0 0 h neg 0 h] 
        { cf is readhexstring pop } 
        { cf gis readhexstring pop } 
        { cf bis readhexstring pop } 
        true 3 colorimage 
        bitmapsave restore 
        grestore
        } bind def
/BITMAPTRUEGRAYc { 
        gsave
        translate rotate scale /h exch def /w exch def
        /bitmapsave save def 
        
        /is w string def
        
        ws 0 w getinterval is copy pop 
        /cf currentfile def 
        w h 8 [w 0 0 h neg 0 h] 
        {ip gip bip w gray} image
        bitmapsave restore 
        grestore
        } bind def
/ww FMLOCAL
/r FMLOCAL
/g FMLOCAL
/b FMLOCAL
/i FMLOCAL
/gray { 
        /ww exch def
        /b exch def
        /g exch def
        /r exch def
        0 1 ww 1 sub { /i exch def r i get .299 mul g i get .587 mul
			b i get .114 mul add add r i 3 -1 roll floor cvi put } for
        r
        } bind def
/BITMAPTRUEGRAY { 
        gsave
        translate rotate scale /h exch def /w exch def
        /bitmapsave save def 
        /is w string def
        /gis w string def
        /bis w string def
        /cf currentfile def 
        w h 8 [w 0 0 h neg 0 h] 
        { cf is readhexstring pop 
          cf gis readhexstring pop 
          cf bis readhexstring pop w gray}  image
        bitmapsave restore 
        grestore
        } bind def
/BITMAPGRAY { 
	8 {fakecolorsetup} COMMONBITMAP
	} bind def
/BITMAPGRAYc { 
	8 {fakecolorsetup} COMMONBITMAPc
	} bind def
/ENDBITMAP {
	} bind def
end 
	/ALDsave FMLOCAL
	/ALDmatrix matrix def ALDmatrix currentmatrix pop
/StartALD {
	/ALDsave save def
	 savematrix
	 ALDmatrix setmatrix
	} bind def
/InALD {
	 restorematrix
	} bind def
/DoneALD {
	 ALDsave restore
	} bind def
(3.0) FMVERSION
1 1 612 792 0 1 3 FMDOCUMENT
0 0 /Times-Bold FMFONTDEFINE
1 0 /Helvetica FMFONTDEFINE
2 0 /Times-Roman FMFONTDEFINE
32 FMFILLS
0 0 FMFILL
1 0.1 FMFILL
2 0.3 FMFILL
3 0.5 FMFILL
4 0.7 FMFILL
5 0.9 FMFILL
6 0.97 FMFILL
7 1 FMFILL
8 <0f1e3c78f0e1c387> FMFILL
9 <0f87c3e1f0783c1e> FMFILL
10 <cccccccccccccccc> FMFILL
11 <ffff0000ffff0000> FMFILL
12 <8142241818244281> FMFILL
13 <03060c183060c081> FMFILL
14 <8040201008040201> FMFILL
16 1 FMFILL
17 0.9 FMFILL
18 0.7 FMFILL
19 0.5 FMFILL
20 0.3 FMFILL
21 0.1 FMFILL
22 0.03 FMFILL
23 0 FMFILL
24 <f0e1c3870f1e3c78> FMFILL
25 <f0783c1e0f87c3e1> FMFILL
26 <3333333333333333> FMFILL
27 <0000ffff0000ffff> FMFILL
28 <7ebddbe7e7dbbd7e> FMFILL
29 <fcf9f3e7cf9f3f7e> FMFILL
30 <7fbfdfeff7fbfdfe> FMFILL
612 792 1 FMBEGINPAGE
72 261 720 711 R
7 X
0 K
V
0 24 Q
0 X
(RMI System) 331.71 695 T
72 261 720 711 C
72 270 720 687 C
67.69 270 724.31 687 R
7 X
0 K
V
218.94 282 465.43 444 18 RR
3 H
0 Z
0 X
N
291.44 372 392.93 426 R
2 H
N
90 450 21.75 27 269.69 327 A
90 450 21.75 27 342.19 327 A
90 450 21.75 27 414.68 327 A
90 450 7.25 9 305.94 426 A
90 450 7.25 9 342.18 426 A
90 450 7.25 9 378.43 426 A
211.69 516 334.93 678 18 RR
3 H
N
349.43 516 472.69 678 18 RR
N
2 H
90 450 21.75 27 247.94 570 A
247.94 552 240.69 534 255.19 534 3 Y
N
90 450 21.75 27 298.69 570 A
298.69 552 291.44 534 305.94 534 3 Y
N
90 450 21.75 27 414.68 570 A
414.68 552 407.43 534 421.93 534 3 Y
N
301.39 452.42 305.93 435.01 292.85 447.37 297.12 449.9 4 Y
V
247.94 534 297.12 449.89 2 L
N
339.71 452.84 342.18 435.01 330.64 448.82 335.17 450.83 4 Y
V
298.69 534 335.18 450.82 2 L
N
389.05 449.53 378.42 435.01 379.74 452.96 384.4 451.25 4 Y
V
414.68 534 384.41 451.24 2 L
N
288.46 357.34 276.93 354.01 284.94 362.94 286.7 360.14 4 Y
V
305.94 372 286.71 360.13 2 L
1 H
N
345.49 365.54 342.18 354 338.88 365.54 342.18 365.54 4 Y
V
342.18 372 342.18 365.54 2 L
N
399.4 362.94 407.42 354.01 395.89 357.34 397.65 360.14 4 Y
V
378.43 372 397.66 360.13 2 L
N
251.24 608.54 247.94 597 244.63 608.54 247.94 608.54 4 Y
V
247.94 642 247.94 608.54 2 L
N
301.99 608.54 298.69 597 295.38 608.54 298.69 608.54 4 Y
V
298.69 642 298.69 608.54 2 L
N
417.99 608.54 414.68 597 411.38 608.54 414.68 608.54 4 Y
V
414.68 642 414.68 608.54 2 L
N
192.8 632.04 204.33 628.74 192.8 625.43 192.8 628.74 4 Y
V
105.33 628.74 192.8 628.74 2 L
N
192.8 578.04 204.33 574.74 192.8 571.43 192.8 574.74 4 Y
V
105.33 574.74 192.8 574.74 2 L
N
192.8 551.04 204.33 547.74 192.8 544.43 192.8 547.74 4 Y
V
105.33 547.74 192.8 547.74 2 L
N
192.8 497.04 204.33 493.73 192.8 490.43 192.8 493.73 4 Y
V
105.33 493.73 192.8 493.73 2 L
N
192.8 434.04 204.33 430.73 192.8 427.43 192.8 430.73 4 Y
V
105.33 430.73 192.8 430.73 2 L
N
192.8 398.04 204.33 394.73 192.8 391.43 192.8 394.73 4 Y
V
105.33 394.73 192.8 394.73 2 L
N
192.8 335.04 204.33 331.73 192.8 328.43 192.8 331.73 4 Y
V
105.33 331.73 192.8 331.73 2 L
N
1 14 Q
(Client invocations) 94.69 640.8 T
(Send rights) 97.56 550.8 T
(Mach IPC) 97.9 501.54 T
(Receive rights) 96.33 438.54 T
(RPC runtime) 96.33 397.8 T
(Server objects) 96.33 334.8 T
(Proxy objects) 96.33 577.8 T
72 261 720 711 C
0 180 792 792 C
477 279 720 684 R
7 X
0 K
V
0 24 Q
0 X
(-) 513 672 T
2 18 Q
(transparent C++ method) 532.98 672 T
(invocations) 534.6 651 T
0 24 Q
(-) 513 621 T
2 18 Q
(automatic object) 532.98 621 T
(dispatching) 534.6 600 T
0 24 Q
(-) 513 570 T
2 18 Q
(object references passed) 532.98 570 T
(as ar) 534.6 549 T
(guments) 567.74 549 T
0 24 Q
(-) 513 519 T
2 18 Q
(proxies can be arbitrarily) 532.98 519 T
(complex) 534.6 498 T
0 24 Q
(-) 513 468 T
2 18 Q
(garbage-collection) 532.98 468 T
(through no-more-) 534.6 447 T
(senders noti\336cations) 534.6 426 T
FMENDPAGE
%%EndDocument
 @endspecial 597 1158 a fk(Figure)10 b(1:)k(Remote)d(Method)e(Invocation)g
(System)0 1291 y(clients)14 b(of)g(the)g(same)h(agent,)h(the)e(remote)h(invoc\
ation)d(system)j(holds)e(only)g(one)i(reference)g(to)f(the)g(agent)g(represen\
ting)g(simply)0 1341 y(the)f(existence)h(of)f(clients.)25 b(It)13 b(does)g
(not)g(maintain)g(an)g(actual)h(count)f(of)g(those)g(clients.)24 b(Also,)14 b
(in)f(this)g(context,)h(clients)f(are)h(not)0 1391 y(necessarily)d(limited)e
(to)h(emulated)g(processes:)16 b(it)9 b(is)h(possible)g(for)f(one)i(server)g
(to)e(be)i(a)g(client)e(of)h(another)g(server)n(.)0 1501 y fj(4.3.2)42 b(Hand\
ling)9 b(the)i(disappearance)g(of)f(bindings)0 1579 y fk(The)k(garbage-collec\
tion)e(facility)g(must)h(deal)h(with)e(two)h(dif)n(ferent)g(types)g(of)g(even\
ts:)21 b(a)14 b(normal)f(explicit)f(release)i(of)f(a)h(binding)0 1629 y(by)d
(a)h(client,)f(and)g(a)h(crash)f(of)g(a)h(client)f(process)g(in)g(which)g(all)
f(active)i(bindings)d(are)j(implicitly)d(released.)19 b(Client)10 b(crashes)i
(present)0 1679 y(the)h(greatest)h(challenge,)h(and)f(a)g(solution)d(for)i
(this)g(question)f(is)i(necessarily)g(general)g(enough)f(to)g(also)g(handle)h
(explicit)e(release)0 1728 y(operations.)30 b(Additional)14 b(mechanisms)j
(to)e(handle)g(explicit)g(releases)i(need)f(to)f(be)h(introduced)e(only)h(if)
g(the)g(general)h(solution)0 1778 y(selected)11 b(is)f(too)g(expensive)g(for)
g(this)f(other)h(common)g(case.)62 1828 y(Any)g(facility)e(to)i(handle)g(garb\
age-collection)e(of)i(bindings)e(when)i(a)h(client)e(process)h(crashes)i(may)
e(be)g(classi\256ed)h(according)f(to)0 1878 y(how)f(it)f(ful\256lls)f(two)i
(independent)f(functions:)k(how)d(it)f(detects)h(a)h(crash)g(and,)f(once)h
(a)g(crash)f(has)h(been)f(detected,)h(how)f(it)f(establishes)0 1928 y(the)i
(list)f(of)h(bindings)f(that)g(are)i(being)f(destroyed.)0 2038 y fj(Detecting)
h(Crashes)62 2116 y fk(There)20 b(are)f(three)f(main)h(approaches)g(in)f(a)g
(Mach)h(environment)f(for)g(user)o(-level)g(server)h(to)f(monitor)e(one)j(of)
f(its)g(clients)0 2166 y(\(implemented)10 b(by)g(a)h(separate)g(Mach)g(task\))
f(and)g(detect)h(a)g(crash)g(of)f(this)f(client:)0 2249 y fj(polling:)19 b fk
(The)e(server)f(periodically)f(exchanges)i(messages)h(with)d(its)h(clients)f
(to)h(determine)g(the)g(continued)f(validity)f(of)i(their)104 2298 y(bindings\
.)k(Though)12 b(logically)f(simple,)i(this)f(method)g(generates)h(message)h
(traf)o(\256c)f(and)g(scheduling)f(load)g(even)h(when)f(the)104 2348 y(system)
g(is)h(not)e(performing)g(any)h(useful)g(work.)21 b(Furthermore,)13 b(to)e
(service)i(these)g(messages)h(each)f(client)f(must)g(contain)g(a)104 2398 y
(special)e(thread/event-handler)m(.)0 2481 y fj(port-death)g(noti\256cation:)
20 b fk(The)c(server)f(holds)g(a)g fg(send-right)f fk(for)h(a)h(port)e(for)h
(which)g(the)g(client)f(holds)h(the)g fg(r)n(eceive-right)h fk(and)104 2531 y
(requests)d(that)g(the)g(Mach)i(kernel)e(generate)h(a)g(port-death)e(noti\256\
cation)g(when)h(that)g fg(r)o(eceive-right)g fk(is)h(destroyed.)24 b(Such)14 b
(a)104 2581 y(destruction)c(of)h(the)g fg(r)o(eceive-right)g fk(indicates)h
(that)e(the)i(client)e(has)i(crashed)g(or)g(has)f(explicitly)f(deallocated)h
(the)h(port.)17 b(This)104 2630 y(method)11 b(avoids)g(the)g(problems)g(assoc\
iated)h(with)f(polling)e(by)i(using)f(Mach)i(IPC)f(features)h(to)f(learn)h
(of)f(client)g(death,)h(yet)f(it)104 2680 y(has)i(some)h(drawbacks)g(of)f(its)
f(own.)23 b(In)13 b(addition)e(to)i(the)g(added)g(port)f(manipulation)f(overh\
ead,)k(a)e(fatal)g(problem)g(is)g(that)954 2807 y(10)p eop
%%Page: 11 13
 bop 104 45 a fk(receive-rights)13 b(in)h(Mach)g(IPC)g(can)h(only)e(be)i(held)
e(by)h(one)g(process.)28 b(Hence)15 b(this)e(method)h(of)g(binding)e(death)i
(detection)104 95 y(would)9 b(force)i(re-registration)d(of)i(bindings)e(after)
j(forking,)e(an)h(option)f(discarded)h(as)h(too)f(costly)f(in)h(section)g(3.2\
.3)0 178 y fj(no-mor)o(e-senders)i(noti\256cation:)19 b fk(The)13 b(server)g
(holds)e(a)i fg(r)o(eceive-right)f fk(for)g(a)h(port)e(for)h(which)f(one)i
(or)f(more)g(clients)g(hold)f fg(send-)104 228 y(rights)d fk(and)i(requests)g
(that)e(the)i(Mach)g(kernel)f(generate)i(a)f(no-more-senders)f(noti\256cation)
f(when)i(all)f(extant)g fg(send-rights)f fk(are)104 278 y(destroyed.)15 b(Suc\
h)10 b(a)h(noti\256cation)e(can)i(be)g(interpreted)e(to)h(signify)f(that)h
(all)g(clients)g(having)f(access)k(to)c(that)h(port)g(have)g(either)104 327 y
(crashed)f(or)g(have)g(deallocated)g(their)f fg(send-right)p fk(.)14 b(It)8 b
(is)h(not)f(possible)g(to)g(detect)h(changes)h(in)e(one)h(particular)f(client)
g(if)g(several)104 377 y(clients)i(hold)f(rights)g(for)g(the)i(same)g(port.)0
487 y fj(Chosen)g(Mechanism)62 565 y fk(Mach-US)h(uses)g(no-more-senders)g
(noti\256cation:)j(it)c(does)g(not)g(require)g(any)h(active)g(participation)d
(from)i(the)h(clients.)18 b(It)11 b(only)0 615 y(comes)17 b(into)e(action)g
(when)h fg(all)f fk(outstanding)e(send-rights)i(have)h(disappeared)g(instead)
g(of)f(detecting)g(each)i(the)f(destruction)e(of)0 665 y(each)d(individual)c
(send-right,)i(and)g(the)h(kernel-generated)g(noti\256cation)e(is)h(typically)
f(faster)i(than)f(a)i(complete)f(user)o(-level)f(message)0 715 y(exchange.)24
b(Unlike)11 b(the)i(situation)e(described)i(for)f(the)h(use)g(of)f(port-death)
g(noti\256cations,)g(every)h(client)f(and)h(server)g(pair)g(always)0 764 y
(possesses)e(a)g(port)f(with)f(the)h(required)g(distribution)c(of)k(rights:)j
(the)e(port)e(by)h(which)f(the)i(client)e(sends)i(requests)f(to)g(the)g(serve\
r)n(.)62 814 y(This)k(strategy)f(also)g(naturally)g(handles)g(the)h(explicit)
e(release)j(of)e(individual)e(bindings,)i(and)g(can)i(be)f(expected)g(to)f
(be)h(more)0 864 y(economical)f(than)e(most)h(specialized)h(user)o(-level)f
(message)i(protocols)d(that)g(ful\256ll)g(the)h(same)h(purpose.)21 b(This)12 b
(is)g(done)f(by)h(taking)0 914 y(advantage)f(of)f(fact)g(that)g(there)g(is)g
(exactly)h(one)f(send-right)f(per)h(binding.)62 964 y(There)i(is)f(one)g(draw\
back:)17 b(it)10 b(is)h(possible)g(for)f(a)i(lar)o(ge)f(number)g(of)g(no-more\
-senders)g(noti\256cations)f(to)g(be)i(generated)f(at)h(once)0 1013 y(when)h
(a)g(client)e(crashes)j(and)f(releases)h(all)e(of)g(its)g(bindings.)20 b(This)
12 b(problem)g(is)g(mitigated)g(by)g(the)g(fact)h(that)f(each)i(noti\256catio\
n)c(is)0 1063 y(only)f(generated)i(when)f(no)g(other)g(client)f(holds)h(a)h
(binding)d(associated)j(with)e(the)h(same)i(port,)d(but)h(it)f(is)h(not)g(alw\
ays)g(negligible.)0 1182 y fd(4.4)50 b(Interrupting)11 b(Pending)h(Invocation\
s)0 1260 y fj(4.4.1)42 b(Backgr)o(ound)0 1337 y fk(Like)19 b(the)f(garbage-co\
llection)f(mechanism)j(used)e(for)g(the)h(implementation)e(of)h(the)g(complet\
e)h(emulation)e(framework,)k(the)0 1387 y(mechanism)c(used)f(to)f(interrupt)f
(pending)h(operations)g(is)g(not)g(con\256ned)h(within)e(the)i(remote)g(invoc\
ation)e(facility)l(.)32 b(It)15 b(may)i(be)0 1437 y(necessary)10 b(to)f(inter\
rupt)e(not)h(only)g(remote)h(invocations,)f(but)g(also)h(many)g(other)g(types)
f(of)h(local)f(computations)g(or)h(blocking)e(points.)0 1487 y(Moreover)n(,)
15 b(once)f(an)g(operation)e(is)h(interrupted,)g(various)g(language-level)g
(mechanisms)i(are)f(required)f(to)g(specify)h(and)f(control)0 1537 y(which)f
(actions)f(the)h(interrupted)f(programs)h(must)g(take,)h(how)f(to)f(respond)h
(to)f(the)h(interrupt,)f(how)h(to)f(continue)g(after)i(it,)f(etc.)21 b(All)0
1586 y(these)11 b(issues)f(are)h(part)f(of)g(the)g(overall)g(programming)f
(model)h(for)g(the)g(implementation)f(of)h(clients)g(and)g(servers.)62 1636 y
(In)17 b(this)f(context,)i(the)f(remote)g(invocation)e(facility)h(is)g(respon\
sible)g(for)h(providing)d(a)k(mechanism)g(allowing)d(the)i(overall)0 1686 y
(language-level)10 b(interrupt)e(facility)h(to)h(interrupt)e(pending)h(remote)
i(invocations.)0 1796 y fj(4.4.2)42 b(Basic)9 b(functions)i(for)f(interruptin\
g)g(remote)h(invocations)0 1874 y fk(The)g(interrupt)d(mechanism)k(provided)d
(by)h(the)g(remote)g(invocation)f(facility)g(must)h(ful\256ll)f(three)h(basic)
h(functions:)62 1957 y fe(\017)21 b fk(Arrange)14 b(for)f(the)h(client)f(code)
h(to)g(resume)h(control)d(when)i(a)g(pending)f(invocation)f(is)i(interrupted.)
24 b(This)14 b(is)g(the)g(primary)104 2007 y(function)9 b(of)g(the)i(interrup\
t)d(facility)l(.)62 2090 y fe(\017)21 b fk(Notify)15 b(the)i(server)h(that)e
(the)h(invocation)f(has)h(been)h(interrupted,)f(to)g(give)g(it)f(an)h(opportu\
nity)d(to)j(abort)f(long-running)104 2140 y(computations)11 b(or)g(perform)h
(other)g(appropriate)f(cleanup)h(functions.)19 b(Dif)o(ferent)12 b(servers)h
(may)f(or)g(may)h(not)e(choose)h(to)g(act)104 2189 y(on)e(such)g(a)h(noti\256\
cation,)e(but)g(such)i(a)g(decision)e(should)g(be)i(independent)e(of)h(the)g
(client.)62 2272 y fe(\017)21 b fk(Ensure)9 b(that)g(any)g(reply)f(generated)
i(by)f(the)g(server)g(does)g(not)g(get)g(lost)f(by)g(being)h(sent)g(to)f(a)i
(client)e(that)h(is)g(no)g(longer)f(prepared)104 2322 y(to)k(handle)g(it.)20 b
(There)14 b(is)e(an)h(inherent)e(race)j(condition)c(in)i(this)f(requirement,)
i(in)f(that)g(the)g(reply)g(may)h(be)f(sent)h(back)g(to)e(the)104 2372 y(clie\
nt)f(at)g(the)g(very)g(same)i(instant)d(that)h(the)g(client)g(is)g(sending)g
(an)h(interrupt)d(request)j(to)e(the)i(server)n(.)k(This)c(race)g(is)g(import\
ant)104 2422 y(because)k(many)g(operations)e(in)g(the)h(emulation)f(framework)
i(cannot)e(easily)h(be)h(made)g(idempotent.)25 b(For)14 b(example,)i(it)d(is)
104 2472 y(in)f(general)i(not)e(acceptable)i(to)f(lose)g(incoming)f(data)h
(on)g(a)g(sequential)g(data)g(stream)h(when)f(a)g(\252read\272)i(operation)d
(must)h(be)104 2521 y(interrupted.)g(Similarly)l(,)c(it)f(is)h(certainly)f
(not)g(acceptable)i(to)f(lose)f(incoming)g(connection)g(requests)h(on)g(a)g
(transport)f(endpoint)104 2571 y(set)i(up)g(to)g(accept)h(such)g(requests.)0
2654 y(Each)g(of)f(these)g(functions)f(contributes)f(a)j(few)f(considerations)
f(for)h(the)g(design)f(of)h(the)g(remote)g(invocation)e(interrupt)h(mechanism\
.)954 2807 y(11)p eop
%%Page: 12 14
 bop 0 45 a fj(4.4.3)42 b(W)m(aking)9 b(the)i(client)0 123 y fk(From)21 b(the)
f(client')m(s)g(perspective,)k(a)d(thread)f(blocked)h(in)e(a)i(pending)f(invo\
cation)f(is)h(actually)g(blocked)g(inside)g(the)g(kernel)0 173 y fc(mach)r 13
2 v 13 w(msg\(\))14 b fk(primitive,)h(waiting)f(for)g(a)i(reply)f(message)h
(to)f(be)g(received.)30 b(It)15 b(is)g(unblocked)f(either)h(by)f(the)h(recept\
ion)g(of)g(a)0 222 y(message)h(or)d(by)h(an)g(explicit)f(Mach)i fc(thread)r 13
2 v 12 w(abort\(\))f fk(operation.)25 b(In)14 b(terms)g(of)g(waking)f(the)h
(client,)h(there)f(are)h(two)e(main)0 272 y(questions:)g(when)e(and)f(how)m
(.)62 322 y(There)i(is)f(a)g(desire)h(to)e(wake)i(the)e(client)h(as)g(soon)g
(as)h(is)e(possible,)h(yet)g(for)f(many)i(invocations,)e(it)g(is)h(important)
e(to)i(know)f(if)g(the)0 372 y(invocation)h(completed)h(or)g(was)h(interrupte\
d.)20 b(T)n(o)12 b(get)g(that)g(information,)f(it)h(is)g(necessary)i(to)e(not\
ify)e(the)i(server)h(that)f(it)g(is)g(being)0 422 y(interrupted)d(and)h(wait)
g(for)f(an)i(acknowledgement)f(of)g(that)g(interrupt)e(or)i(a)h(reply)f(to)g
(the)g(invocation.)62 472 y(On)g(the)f(other)g(hand,)h(such)g(waiting)e(assum\
es)j(that)e(the)g(server)h(reacts)h(promptly)d(to)h(the)g(noti\256cation.)k
(This)d(places)g(each)h(client)0 521 y(at)g(the)g(mercy)g(of)g(any)g(server)g
(with)f(which)g(it)g(may)i(be)f(in)f(contact,)h(having)f(no)h(obvious)e(way)i
(to)f(interrupt)f(a)j(client)e(waiting)f(on)i(an)0 571 y(unresponsive)g(serve\
r)n(.)19 b(Unless)12 b(the)g fc(mach)r 13 2 v 12 w(msg\(\))f fk(operation)g
(on)g(the)h(client)f(was)h(initiated)e(with)g(an)i(explicit)e(time-out)h(\(wh\
ich)0 621 y(cannot)d(normally)f(be)h(the)g(case\),)i(the)e(client)f(will)g
(simply)g(remain)i(blocked)e(forever)n(.)14 b(Such)8 b(a)h(limitation)c(is)j
(undesirable)g(in)f(a)i(system)0 671 y(where)h(one)g(of)f(the)h(goals)f(is)g
(to)g(make)i(it)e(easy)h(for)g(individual)d(users)j(to)f(add)g(arbitrary)g
(servers.)16 b(Furthermore,)10 b(this)e(scheme)k(forces)0 721 y(every)e(serve\
r)g(to)g(handle)f(interrupt)f(noti\256cations,)h(even)h(if)f(it)g(would)g(not)
g(make)i(any)e(use)i(of)e(such)h(a)g(noti\256cation)e(in)i(the)f(context)g
(of)0 770 y(its)h(own)f(internal)h(operation.)62 820 y(Therefore,)15 b(the)f
(chosen)f(solution)e(is)i(to)g(send)h(an)f(interrupt)e(noti\256cation)h(and)h
(timeout)g(if)f(a)i(reply/acknowledgment)e(is)h(not)0 870 y(received)g(prompt\
ly)l(.)22 b(A)13 b(reply/acknowledgement)e(would)h(cause)h(the)g(pending)e fc
(mach)r 13 2 v 13 w(msg\(\))h fk(to)g(complete)h(naturally)l(.)22 b(If)12 b
(the)0 920 y(timeout)f(occurs)h(\256rst,)h(the)e(only)g(remaining)g(option)f
(is)i(to)f fc(thread)r 13 2 v 13 w(abort\(\))g fk(the)h fc(mach)r 13 2 v 12 w
(msg\(\))g fk(and)g(react)g(as)h(if)e(the)h(initial)0 970 y(invocation)d(fail\
ed.)0 1080 y fj(4.4.4)42 b(Notifying)8 b(the)j(server)0 1158 y fk(A)17 b(serv\
er)g(is)g(typically)e(handling)h(many)h(concurrent)f(invocations)g(from)g(man\
y)i(dif)n(ferent)f(clients.)34 b(The)18 b(main)f(issue,)i(when)0 1207 y(notif\
ying)9 b(a)i(server)h(that)f(a)h(pending)e(invocation)g(is)h(being)f(interrup\
ted,)h(is)g(how)g(to)f(identify)g(the)h(particular)f(invocation)g(\(and)h(the)
0 1257 y(corresponding)i(client\))h(to)g(the)h(server)n(.)28 b(There)16 b(are)
f(two)f(obvious)g(choices:)23 b(to)15 b(deallocate)g(the)f(reply)g(port)g(\(u\
sing)f(port-death)0 1307 y(noti\256cation)c(to)g(tell)h(the)g(server)g(of)g
(the)h(interruption\))c(or)j(to)f(send)i(an)f(explicit)f(interrupt)g(message)
j(on)e(the)g(binding)e(in)i(question.)62 1357 y(The)15 b(problem)e(with)g(the)
h(logically)f(simple)h(act)g(of)g(deallocating)f(the)h(reply)f(port)g(is)h
(that)g(it)f(makes)i(it)e(impossible)g(to)h(avoid)0 1407 y(losing)8 b(a)j(nor\
mal)e(reply)g(from)h(the)f(server)h(should)f(one)h(have)g(been)g(calculated)g
(at)g(the)f(wrong)g(time.)15 b(This)10 b(problem)f(is)g(most)h(severe)0 1456 y
(when)h(the)f(client)g(and)h(server)g(are)h(on)e(dif)n(ferent)h(nodes.)16 b
(Even)11 b(if)f(some)i(way)f(were)g(found)f(to)g(avoid)g(losing)f(a)i(reply)m
(,)g(it)f(would)g(still)0 1506 y(be)i(required)f(to)g(\256nd)g(some)h(way)g
(to)f(undo)g(the)g(actions)g(that)g(led)h(to)f(its)f(creation.)19 b(This)12 b
(would)e(be)i(necessary)h(for)e(every)h(possible)0 1556 y(reply)m(.)62 1606 y
(The)19 b(use)f(of)f(an)h(explicit)e(interrupt)g(message)k(is)d(considerably)
g(more)h(complicated)g(and)f(expensive,)j(but)d(it)g(avoids)g(the)0 1656 y
(dif)n(\256culties)10 b(seen)h(with)f(port)f(deallocation.)14 b(How)c(it)g
(avoids)f(these)i(problems)f(is)g(described)g(in)g(section)g(4.4.5.)0 1766 y
fj(Identifying)f(an)i(invocation)e(in)h(an)g(interrupt)h(message)62 1844 y fk
(An)f(interrupt)e(message)k(is)e(not)f(suf)o(\256cient)h(to)g(uniquely)e(iden\
tify)h(one)h(particular)f(invocation,)g(since)i(several)f(invocations)f(and)0
1894 y(several)i(clients)f(may)i(be)e(active)h(on)g(the)f(same)i(binding)d
(at)h(the)h(same)h(time.)k(The)11 b(number)g(of)f(such)h(active)g(invocations)
e(is)h(usually)0 1943 y(small,)h(and)g(certainly)f(much)i(smaller)f(than)f
(the)h(total)e(number)i(of)g(invocations)e(processed)i(by)g(the)f(whole)h(ser\
ver)g(on)g(all)f(bindings)0 1993 y(for)h(its)g(items,)h(but)e(it)h(is)g(not)f
(always)i(equal)f(to)g(one.)19 b(T)m(o)11 b(solve)g(this)g(problem,)g(one)h
(can)g(either)f(tag)g(each)h(invocation)e(for)h(possible)0 2043 y(later)f(int\
erruption,)e(or)i(\256nd)g(some)h(acceptable)g(way)g(to)f(relax)g(the)g(inter\
rupt)e(semantics.)62 2093 y(Choosing)i(an)h(invocation)f(tag)h(is)g(not)f(eas\
y)o(.)18 b(The)12 b(most)f(obvious)f(choice)h(would)f(be)i(to)f(ship)f(anothe\
r)h(right)f(to)g(the)h(reply)g(port)0 2143 y(in)e(the)h(interrupt)e(message.)
17 b(For)10 b(speed)h(reasons,)g(these)f(reply)f(port)g(rights)g(must)h(be)g
(send-once-rights.)k(Y)l(et,)c(in)g(Mach,)h(two)e(send-)0 2192 y(once-rights)
e(for)h(the)g(same)i(port)d(will)g(not)h(have)g(the)h(same)g(values)g(and)f
(there)g(is)h(no)f(way)g(to)g(compare)h(them.)15 b(Sending)7 b(an)i(additiona\
l)0 2242 y(send-right)h(as)i(a)g(tag)f(with)g(each)h(invocation)e(would)g(als\
o)i(signi\256cantly)e(slow)h(down)f(communication)h(\(see)i(section)e(4.2.1\)\
.)18 b(Just)0 2292 y(using)10 b(a)i(numeric)f(tag)f(would)g(not)h(securely)g
(prevent)f(other)h(active)g(invocations)f(on)g(a)i(binding)d(from)h(being)h
(interrupted.)k(This)c(is)0 2342 y(probably)g(acceptable)i(given)f(the)g(rest\
rictions)f(on)h(how)g(a)g(given)g(binding)e(is)i(shared.)22 b(But)11 b(the)h
(problem)g(of)g(assigning)f(a)i(unique)0 2392 y(identi\256er)c(across)i(all)f
(holders)g(of)g(a)h(binding)d(is)i(not)f(trivial)g(\(especially)h(if)g(client\
s)g(reside)g(on)g(separate)h(nodes\).)62 2441 y(An)h(alternative)f(to)g(tags)
h(is)f(to)h(relax)f(the)h(interrupt)e(semantics)i(to)f(specify)h(that)f(when)
h(an)g(interrupt)e(message)j(is)f(received)g(by)0 2491 y(the)f(server)o(,)g fg
(all)f fk(pending)g(invocations)g(on)g(the)h(associated)h(binding)d(should)h
(be)h(interrupted.)16 b(This)11 b(solution)e(obviously)g(provides)0 2541 y
(the)i(minimal)f(overhead)h(for)f(the)h(normal)f(\(non-interrupt\))e(case,)13
b(since)e(there)g(is)f(no)h(tag)f(whatsoever)n(.)17 b(It)10 b(also)h(does)g
(not)f(af)o(fect)h(the)0 2591 y(security)e(of)g(the)g(mechanism)i(any)f(more)
g(than)f(the)g(use)h(of)f(numerical)h(tags,)g(since)f(interrupts)f(are)i(stil\
l)e(limited)h(to)f(a)i(single)f(binding)0 2641 y(family)m(.)20 b(However)n
(,)13 b(it)e(does)h(require)f(that)g(each)i(client)e(be)h(prepared)h(for)e
(any)h(invocation)e(to)h(be)h(interrupted)e(unnecessarily)m(,)j(and)0 2691 y
(the)d(the)g(client)g(must)g(restart)g(such)h(interrupted)d(invocations,)h
(as)i(appropriate.)954 2807 y(12)p eop
%%Page: 13 15
 bop 62 45 a fk(This)13 b(model)h(of)f(interaction)f(is)h(similar)f(to)h(the)
g(one)h(de\256ned)f(for)g(the)g(semantics)h(of)f(condition)f(variables)h(in)f
(many)i(threads)0 95 y(packages)i([PThreads93],)f(where)g(the)f(implementatio\
n)f(allows)h(threads)g(waiting)f(on)h(the)g(condition)f(to)g(wake-up)i(even)f
(if)g(the)0 145 y(condition)c(has)i(not)e(been)i(signalled.)19 b(In)11 b(prac\
tice,)i(such)e(a)h(complication)f(does)h(not)e(create)j(signi\256cant)e(dif)n
(\256culties.)19 b(The)12 b(nature)0 195 y(of)i(most)g(invocations)f(and)h
(syscalls)g(is)g(such)h(that)e(the)h(system)h(must)f(be)g(prepared)h(to)e(res\
tart)h(them)h(after)f(an)g(interrupt)f(occurs)0 244 y(anyway)m(,)h(whether)d
(such)i(an)f(interrupt)f(was)h(legitimate)g(or)f(not.)21 b(Moreover)n(,)13 b
(interrupts)d(are)j(rare)g(in)e(normal)h(operation,)g(and)g(the)0 294 y(overh\
ead)e(and)f(complexity)f(introduced)g(by)h(the)h(restart)f(requirement)g(can)
h(be)g(almost)f(completely)g(restricted)g(to)f(this)h(special)h(case)0 344 y
(and)g(avoided)g(in)g(the)g(common,)h(non-interrupt)c(case.)62 394 y(Accordin\
g)j(to)f(these)i(various)e(considerations,)g(the)h(no-tag)f(solution)f(appear\
s)j(to)f(be)g(the)g(most)g(appropriate)f(and)h(is)g(the)g(one)g(in)0 444 y
(use.)0 554 y fj(4.4.5)42 b(Interrupt)11 b(processing)g(and)f(reply)0 632 y
(Atomic)f(success)k(or)d(failur)o(e)62 709 y fk(The)h(obvious)d(solution)g
(to)h(the)g(race)i(condition)d(presented)i(by)f(the)h(generation)f(of)g(an)h
(invocation)e(reply)h(is)h(to)f(allow)g(interrupts)0 759 y(to)14 b(fail)h(or)
f(succeed)j(atomically)m(.)29 b(If)15 b(a)g(reply)g(is)f(generated,)j(the)e
(invocation)f(should)f(simply)i(complete)g(normally)f(and)h(return)0 809 y
(whatever)e(information)d(was)j(provided)e(with)g(that)h(reply)l(.)22 b(If)12
b(an)g(invocation)f(reply)h(is)g(not)f(generated)i(by)f(the)g(time)g(the)g
(interrupt)0 859 y(is)f(processed,)h(the)e(invocation)f(system)j(should)d(ret\
urn)h(a)h(special)h(interrupt)c(completion)i(code)h(with)f(a)h(guarantee)h
(that)e(no)g(further)0 909 y(reply)j(will)f(be)i(generated)g(or)f(received)h
(for)f(this)f(invocation.)23 b(These)15 b(semantics)f(are)h(not)d(ideal)h(in)
g(that)g(they)g(may)h(force)g(every)0 958 y(client)e(of)g(the)g(invocation)e
(system)j(to)e(handle)h(one,)i(possibly)c(undesired,)j(normal)f(invocation)f
(reply)l(,)i(but)f(they)g(are)h(suf)o(\256cient)f(to)0 1008 y(avoid)e(any)g
(lost)f(information)g(or)h(uncertainty)f(regarding)g(the)h(status)g(of)g(an)h
(invocation.)0 1118 y fj(How)f(is)g(this)g(done)62 1196 y fk(Upon)i(receiving)
f(an)i(interrupt)d(message,)15 b(the)d(server)g(checks)i(if)d(the)h(invocatio\
n)f(is)h(still)e(in)i(progress.)20 b(If)12 b(it)f(is)h(not,)h(then)e(the)0
1246 y(reply)f(message)i(is)e(already)h(on)f(its)g(way)m(,)h(and)g(the)f(inte\
rrupt)e(should)i(simply)f(be)i(ignored.)k(Otherwise,)10 b(the)g(server)h(shou\
ld)f(arrange)0 1296 y(for)g(the)g(invocation)f(to)h(be)g(aborted)h(as)g(soon)
f(as)h(is)f(possible.)15 b(If)10 b(and)g(when)h(it)e(is)i(aborted,)f(a)h(spec\
ial)g(reply)f(message)i(is)e(sent)g(to)g(the)0 1346 y(invocations)h(reply)g
(port.)20 b(It)11 b(acknowledges)i(the)e(interrupt)g(in)g(lieu)h(of)f(the)h
(normal)g(reply)m(.)20 b(If)12 b(the)g(invocation)e(completes)j(before)0 1395
y(it)e(can)i(be)g(interrupted,)e(then)h(a)h(normal)f(reply)f(occurs.)22 b(Not\
e:)c(Mach-US)13 b(supplies)e(an)i(extensive,)g(easy)g(to)e(use)i(language)f
(level)0 1445 y(mechanism)e(for)e(servers)h(\(or)f(clients\))g(to)g(describe)
h(when)g(and)f(how)g(they)h(can)g(be)g(interrupted.)k(This)8 b(mechanism)i
(has)f(been)g(simply)0 1495 y(applied)h(to)f(pre-existing)g(code.)16 b(Its)10
b(details)f(are)i(not)f(important)f(to)g(this)h(discussion,)f(and)i(are)g(out\
side)e(the)h(scope)h(of)f(this)f(paper)n(.)62 1545 y(As)i(a)g(further)f(optim\
ization,)f(the)i(invocation)e(system)i(knows)f(that)g(some)h(methods)g(repres\
ent)g(simple)f(calculations)g(that)g(will)0 1595 y(never)16 b(need)g(to)f(wai\
t.)30 b(For)15 b(these)h(methods,)h(the)e(interrupt)f(systems)i(overhead)g
(is)f(not)g(incurred)g(and)g(the)g(method)g(is)h(always)0 1644 y(permitted)9 b
(to)h(run)g(to)g(completion.)62 1694 y(V)l(ariations)j(on)h(this)g(scheme)i
(would)e(include)g(explicit)f(acknowledgments)h(of)g(every)h(interrupt)e(or)h
(automatic)h(destruction)0 1744 y(of)d(truly)e(unwanted)i(replies)f(on)h(the)
g(client)f(side.)20 b(But)11 b(these)i(variations)e(simply)g(add)h(complexity)
f(for)g(every)h(interrupt,)f(without)0 1794 y(adding)c(any)h(signi\256cant)f
(functionality)e(or)j(robustness)f(to)h(the)g(scheme.)16 b(Moreover)n(,)9 b
(they)e(raise)i(additional)d(questions)h(with)f(respect)0 1844 y(to)13 b(the)
h(interruption)d(of)j(multiple)e(pending)h(invocations)f(with)h(a)i(single)e
(interrupt)f(message.)28 b(Accordingly)l(,)15 b(neither)e(has)i(been)0 1894 y
(adopted.)0 2033 y fh(5)60 b(Status/Numbers)0 2126 y fg(Note)10 b(to)f(r)o
(eviewers:)16 b fk(Final)10 b(paper)g(copy)h(will)d(have)j(similar)n(,)g(more)
f(recent)h(numbers.)62 2176 y(This)k(section)g(examines)i(some)f(measurements)
h(of)e(Mach-US)g(and)h(its)e(UNIX)h(emulation.)30 b(While)15 b(these)h(measur\
ements)0 2226 y(include)d(more)g(than)g(just)f(the)h(client)g(server)h(intera\
ction)e(times,)i(they)f(are)h(supplied)e(to)h(demonstrate)g(that)f(Mach-US,)i
(using)f(its)0 2275 y(complex)d(binding)f(and)h(invocation)f(system,)i(has)f
(similar)g(end-to-end)f(performance)i(to)f(other)g(UNIXs.)62 2325 y(The)i(tim\
ings)f(given)f(compare)j(the)e(Mach-US)h(UNIX)f(emulation)g(with)f(those)h
(benchmarks)i(for)e(the)g(Mach3.0)h(single)f(server)0 2375 y(\(Mach-UX\))i
(system)g([Golub)456 2360 y ff(+)473 2375 y fk(93].)23 b(This)12 b(data)h(is)
g(not)f(intended)g(to)g(be)h(a)h(source)f(of)f(detailed)h(analysis)g(of)f(the)
h(performance)g(of)0 2425 y(Mach-US.)62 2516 y fe(\017)21 b fk(The)7 b fg(com\
pile-test)e fk(is)h(a)h(Mach)g(classic)g(that)f(compiles)g(nine)g(medium-smal\
l)g(programs.)14 b(Running)5 b(the)h(compile-test)f(\(without)104 2566 y(the)
14 b(load)f(phase)i(because)h(the)e(results)f(existed)h(locally\))f(we)i(see)
g(the)f(following)e(UNIX)i(occurrences:)23 b(9)14 b(compilations,)104 2616 y
(48)c(emulated)g(processes)h(\(9)f(*)g(\(cc)h(+)g(cpp)f(+)h(ccom)g(+)g(as)f
(+)h(ld\)\))e(+)i(\(2)f(*)g(date\))g(+)h(csh,)g(27)e(\256les)i(created,)g(sys\
tem)g(calls:)k(9290.)104 2666 y(Y)l(et)9 b(because)i(of)f(the)f(intelligent)e
(proxies)i(and)h(emulation)e(library)l(,)j(there)e(were)i(only)d(2430)h(outgo\
ing)e(RMI')m(s.)16 b(Running)7 b(the)954 2807 y(13)p eop
%%Page: 14 16
 bop 104 45 a fk(compile-test)11 b(again)i(\(with)e(the)h(load)f(phase\))i
(on)f(a)h(HP)f(386/25c)f(V)l(ectra)i(with)e(16Meg,)i(takes)f(27)g(seconds)h
(for)f(Mach-US)104 95 y(versus)e(21)g(seconds)h(for)f(Mach-UX)g(\(MK78)g(-)g
(UX39/US48\).)62 178 y fe(\017)21 b fk(The)10 b fg(parallel-compile-test)e fk
(is)i(a)g(related)g(test)g(that)f(runs)h(any)g(number)g(of)g(compile-tests)f
(at)h(the)g(same)i(time.)j(On)10 b(a)g(Sequent)104 228 y(Symmetry)15 b(hardwa\
re)h(with)e(20)h(i386/16Mhz)f(processors)h(and)h(32Meg)f(of)g(memory)m(,)i
(with)e(10)g(compile-tests,)h(we)g(see)104 278 y(Mach-UX\(UX38/MK78\))7 b(=)h
(146)g(seconds)h(and)f(Mach-US\(US48/MK78\))f(=)i(139)f(seconds.)15 b(Mach-US)
9 b(is)f(slightly)e(faster)n(.)62 361 y fe(\017)21 b fg(FTP)8 b fk(is)e(a)i
(very)f(high)f(level)g(test)h(of)g(the)g(Mach-US)g(network)f(service.)15 b
(FTP)8 b(is)e(run)h(on)f(machine1,)j(a)e(i486/50Mhz)f(with)f(24Meg)104 410 y
(of)k(memory)n(.)15 b(FTPD)c(is)e(run)h(on)f(machine2,)i(a)g(i486/25Mhz)d(16M\
eg)h(of)h(memory)g(\(UX39/MK78\).)j(The)e(software)f(running)104 460 y(on)e
(machine2)h(does)g(not)f(change)h(during)e(the)h(test.)15 b(W)n(ith)8 b(machi\
ne1)h(running)e(Mach-US\(US49/MK83\))g(doing)g(either)h(a)h fg(get)104 510 y
fk(or)g(a)h fg(put)f fk(of)g(a)h(750Kbyte)f(\256le)h(from/to)e fg(/dev/null)p
fk(,)g(the)i(throughput)d(is)i(210KBytes/sec.)14 b(Using)9 b(Mach-UX\(UX39/MK\
83\),)104 560 y(FTP)i(puts)e(run)h(at)g(120Kbytes/sec)g(and)g(gets)h(run)e
(at)i(150Kbytes/sec.)62 643 y fe(\017)21 b fk(Comparing)5 b fg(r)o(emote-invo\
cation)t fk(times)i(on)f(the)g(V)-5 b(ectra)8 b(we)e(\256nd)h(that)e(a)i(raw)
g(fast)f(path)g(CMU)g(Mig)g(invocation)f(takes)i(340usec,)104 693 y(a)16 b
(simple)f(Mach-US)h(RMI)f(\(without)f(interrupts)f(or)i(access)j(control\))c
(takes)i(653usec,)h(a)f(complex)g(RMI)f(\(passing)g(and)104 742 y(returning)6
b(an)j(object)f(reference\))h(takes)g(1228usec.)14 b(Adding)7 b(interruption)
f(adds)i(another)g(390usec)g(to)g(each)h(\(US44/MK65\).)0 834 y(The)j(compile\
-test)f(and)g(other)g(straight-line)e(timings)h(have)i(shown)f(that)g(Mach-US)
g(generally)g(runs)g(10-25)g(percent)g(slower)h(than)0 884 y(Mach-UX)f(for)e
(high)h(level)g(benchmarks.)62 933 y(The)i(UNIX)f(emulation)f(portion)f(of)h
(the)h(system)h(is)e(largely)g(un-tuned.)16 b(This)11 b(is)g(because)h(the)f
(chronically)f(limited)g(Mach-US)0 983 y(resources)f(have)f(been)g(concentrat\
ed)g(on)g(improving)e(its)h(functionality)e(and)j(robustness.)14 b(Despite)7 b
(this,)h(some)h(macro-benchmarks)0 1033 y(show)g(results)f(in)h(the)g(same)h
(range)f(or)g(better)g(than)f(those)h(obtained)f(with)g(Mach-UX.)i(There)g
(are)g(a)f(number)g(of)g(known)f(areas)j(where)0 1083 y(signi\256cant)e(perfo\
rmance)i(gains)f(can)h(be)g(achieved)g(through)d(straightforward)h(engineerin\
g)g(efforts.)62 1133 y(This)k(straight-line)e(performance)i(gap)g(is)g(signi\
\256cant,)g(yet)g(Mach-US)g(achieves)h(the)e(level)h(of)g(performance)g(that)
g(it)f(does)h(in)0 1183 y(a)h(more)g(complex,)h(and)f(much)g(richer)g(environ\
ment,)f(than)h(the)f(systems)h(to)f(which)h(it)f(is)g(being)g(compared.)26 b
(These)15 b(results)e(are)0 1232 y(suf)o(\256cient)d(to)f(show)h(that)g(perfo\
rmance)g(should)f(not)g(be)i(the)f(issue)g(when)g(it)f(comes)i(to)f(judging)e
(the)i(suitability)d(of)i(this)h(system)g(and)0 1282 y(its)g(client-server)f
(support)g(for)h(practical)g(applications.)0 1422 y fh(6)60 b(Conclusions)0
1515 y fk(This)17 b(paper)g(has)h(described)f(issues)h(of)f(binding)e(mainten\
ance)j(in)e(an)i(object-oriented)d(multi-server)h(operating)g(system)i(and)0
1564 y(solutions)8 b(to)i(those)g(problems)g(in)g(a)g(Mach3.0)h(kernel)f(envi\
ronment.)62 1614 y(Mach-US)i(has)g(implemented)g(a)g(mechanism)h(for)e(client\
-server)g(interaction)f(that)h(is)h(suf)n(\256ciently)f(rich)g(to)g(support)g
(an)h(object)0 1664 y(based)g(operating)f(system)h(structured)e(as)j(a)f(coll\
ection)e(of)h(operating)g(system)h(services,)h(with)e(OS)g(services)i(partly)
d(implemented)0 1714 y(in)g(each)h(client)f(process.)16 b(It)10 b(has)h(also)
f(demonstrated)g(an)h(acceptable)h(level)e(of)g(performance)h(for)f(this)f
(implementation)g(even)i(with)0 1764 y(its)f(increased)h(\257exibility)-5 b
(.)62 1813 y(This)10 b(research)i(included)d(how)h(to)g(achieve:)62 1896 y fe
(\017)21 b fk(Remote)10 b(method)g(invocations)f(while)h(hiding)e(server)j
(boundaries.)62 1979 y fe(\017)21 b fk(T)o(ransparency)11 b(of)f(server)g(com\
munication)g(mechanism)h(and)g(location.)62 2062 y fe(\017)21 b fk(Safe)11 b
(transfer)f(of)g(bindings)e(between)j(clients)f(without)e(re-registration.)62
2145 y fe(\017)21 b fk(Flexible)9 b(garbage)i(collection)e(of)h(deallocated)g
(or)g(crashed)i(bindings.)62 2229 y fe(\017)21 b fk(A)10 b(server-friendly)e
(interruption)g(mechanism.)62 2312 y(The)14 b(lessons)g(learned)f(are)i(appli\
cable)e(to)g(multi-server)f(OS)i(design)f(and)g(should)f(be)i(useful)f(to)g
(object)g(based)h(systems)g(that)0 2361 y(require)c(similar)g(features)g(in)g
(a)h(\252micro\272)g(kernel)f(environment.)0 2495 y fh(Refer)o(ences)0 2579 y
fi([Draves90])28 b(Richard)8 b(P)l(.)h(Draves.)k(A)c(Revised)f(IPC)i(Interfac\
e)j fb(Usenix)8 b(Mach)g(Symposium)g(Pr)n(oceedings)p fi(,)f(Oct.)i(1990.)0
2641 y([Golub)106 2625 y fa(+)122 2641 y fi(93])25 b(David)6 b(Golub,)i(Randa\
ll)e(Dean,)h(Alessandro)f(Forin,)i(and)e(Richard)h(Rashid.)i(Unix)e(as)f(an)h
(application)g(program.)j fb(USENIX)d(Summer)197 2687 y(1990)h(Confer)m(ence)
g(Pr)n(oceedings)p fi(,)f(June)h(1990.)954 2807 y fk(14)p eop
%%Page: 15 17
 bop 0 45 a fi([Guedes&Julin91])19 b(Paulo)8 b(Guedes)f(and)h(Daniel)h(Julin.)
k(Object-Oriented)c(Interfaces)f(in)h(the)g(Mach)f(3.0)h(Multi-Server)h(Syste\
m.)j fb(Pr)n(oceedings)197 91 y(of)c(the)g(IEEE)g(Second)e(International)i
(W)m(orkshop)d(on)j(Object)g(Orientation)g(in)g(Operating)f(Systems)p fi(,)g
(October)h(1991.)0 153 y([Hutchinson&Peterson91])18 b(N.C.)8 b(Hutchinson)d
(and)h(L.L.)h(Peterson.)i(The)d(x-Kernel:)13 b(An)6 b(architecture)h(for)g
(implementing)g(network)g(protocols.)197 199 y(In)i fb(IEEE)g(T)n(ransactions)
e(on)h(Softwar)n(e)h(Engineering)e fi(17\(1\):64-76,Jan.1991.)0 261 y([Julin)
85 245 y fa(+)101 261 y fi(91])46 b(Daniel)6 b(P)-5 b(.)7 b(Julin,)g(Jonathan)
e(C.)h(Chew)m(,)h(J.)g(Mark)f(Stevenson,)f(Paulo)h(Guedes,)f(Paul)h(Neves,)g
(and)g(Paul)f(Roy)m(.)k(Generalized)c(Emulation)197 307 y(Services)j(for)j
(Mach3.0:)j(Overview)m(,)d(Experiences)d(and)h(Current)h(Status)16 b fb(Useni\
x)8 b(Mach)i(Symposium)e(Pr)n(oceedings)p fi(,)g(November)197 352 y(1991.)0
415 y([Khalidi&Nelson93])20 b(Y)-5 b(.A.)16 b(Khalidi)f(and)f(M.N.)j(Nelson.)
28 b(An)15 b(implementation)f(of)i(UNIX)f(on)g(an)f(Object-oriented)h(Operati\
ng)g(System.)197 460 y fb(USENIX)9 b(W)n(inter)g(1993)f(Confer)m(ence)g(Pr)n
(oceedings)p fi(,)f(January)g(1993.)0 522 y([Kleiman86])21 b(Kleiman,)14 b
(S.R.)25 b(Vnodes:)c(An)13 b(Architecture)g(for)h(Multiple)g(File)g(System)e
(T)n(ypes)g(in)h(Sun)g(UNIX.)25 b fb(USENIX)13 b(Summer)f(1986)197 568 y(Conf\
er)m(ence)c(Pr)n(oceedings)p fi(,)f(1986.)0 630 y([Orman)116 615 y fa(+)132
630 y fi(93])21 b(H.)8 b(Orman,)g(E.)f(Menze)f(III,)j(S.)f(O'Malley)n(,)g(and)
e(L.)i(Peterson.)h(A)f(Fast)e(and)h(General)g(Implementation)g(of)g(Mach)g
(IPC)g(in)h(a)f(Network.)197 676 y fb(Usenix)h(Mach)g(Symposium)g(Pr)n(oceedi\
ngs)p fi(,)f(April)j(1993.)0 738 y([PThreads93])19 b(IEEE)8 b(Standard)g(Port\
able)f(Operating)h(System)g(Interface)g(-)h(Threads)d(Extension.)11 b(IEEE)d
(Std.)h(P1003.4)d(Draft)k(8,)e(October)g(1993.)0 801 y([Phelan)115 785 y fa
(+)130 801 y fi(93])21 b(James)8 b(M.)j(Phelan,)f(James)f(W)l(.)i(Arendt,)g
(and)e(Gary)h(R.)g(Ormsby)m(.)17 b(An)10 b(OS/2)g(Personality)f(on)h(Mach.)15
b fb(Usenix)9 b(Mach)h(Symposium)197 846 y(Pr)m(oceedings)p fi(,)e(April)i
(1993.)0 909 y([Shapiro86])20 b(Marc)c(Shapiro.)30 b(Structure)16 b(and)e(enc\
apsulation)f(in)j(distributed)g(computing)e(systems:)26 b(the)15 b(Proxy)g
(principle.)31 b(In)15 b fb(The)g(6th)197 954 y(International)8 b(Confer)m
(ence)g(on)h(Distributed)f(Computing)h(Systems)p fi(,)f(Boston)g(USA,)h(May)g
(1986.)0 1016 y([Zajcew)123 1001 y fa(+)139 1016 y fi(93])20 b(R.)14 b(Zajcew)
m(,)h(P)l(.Roy)m(,)g(D.)g(Black,)f(C.)g(Peak,)g(P)l(.)g(Guedes,)g(B.)g(Kemp,)
h(J.)e(LoV)l(erso,)h(M.)h(Leibensper)m(ger)n(,)h(M.)e(Barnett,)i(F)l(.)f(Rabi\
i,)197 1062 y(Netterwala.)h(An)10 b(OSF/1)f(Unix)h(for)h(Massively)e(Parallel)
h(Multicomputers.)16 b fb(USENIX)10 b(W)n(inter)g(1993)f(Confer)n(ence)f(Pr)n
(oceedings)p fi(,)197 1108 y(January)f(1993.)954 2807 y fk(15)p eop
%%Trailer
 end
%%EOF