Security Service Client Programs
Every DCE client machine has, as part of the dced daemon, the Security Validation Service. This service takes the place of the machine principal. Most principals are interactive users, but the machine principal is not. The Security Validation Service performs the processing necessary so that other daemon processes on the machine appear to be running with the machine's identity.
The Security Validation Service periodically refreshes the ticket-granting ticket for the machine's principal. A DCE client machine must have a valid ticket-granting ticket in order for a principal to use DCE services. The Security Validation Service also exports the interface that assures a Security client that it is actually contacting the real Security server when the client requests a ticket-granting ticket from the Security server.