HP-UX 11i December 2001 Release Notes

HP-UX 11i Operating Environment Applications
HP-UX 11i Operating Environment
Chapter 4
75
Installation Requirements
The minimum disk space required to install the product is 1MB. Additional disk space of
about 1KB per user in the system /tmp file is required to store initial Ticket Granting
Tickets in the credential cache file.
Impact
HP-UX PAM Kerberos is implemented under the PAM framework, which allows new
authentication service modules to be plugged in and made available without modifying
the application or rebooting the system.
PAM Kerberos works on HP 9000 servers and workstations with a minimum of 32MB of
memory and sufficient swap space (a minimum of 50MB is recommended).
NOTE PAM Kerberos is not thread safe.
Coexistence Issues
PAM Kerberos (libpam_krb5.1) and PAM DCE (libpam_dce.1) plug-in modules can
not be stacked together in the pam.conf file because of different principal styles and
credential file paths. If so stacked, the results will be unpredictable.
The Kerberos system ftp service may list the /etc/issue file before the expected
output. The sis (5) manpage provides detailed information. If the password has expired
on a Microsoft Windows 2000 KDC, you will be asked for a new password but will not be
allowed to log in. This is a known problem in Windows 2000.
When changing passwords on a MIT KDC with a version prior to 1.1, up to 45 seconds
may elapse before the password is actually changed due to the selection mechanism of
the change password protocol.
Documentation
The following documentation is available:
The newly created manpage for pam_kerberos is available at:
/usr/share/man/man5.Z/pam_krb5.5
The white paper, Network Security Features of HP-UX 11i, is available on the Web at:
http://www.unix.hp.com/operating/hpux11i/infolibrary/
The PAM Kerberos Release Notes for HP-UX 11i is available at
http://docs.hp.com
Plug-In for the Java 2 Platform for Netscape Communicator
updated for
September 2001
The Runtime Plug-in (JPI) for the Java 2 platform allows you to use a version of the
runtime environment that differs from the runtime environment embedded with
Netscape Navigator 4.61 or later.