HP-UX 11i December 2004 Release Notes
Table Of Contents
- HP-UX 11i December 2004 Release Notes
- 1 Finding HP-UX 11i v1 Documentation
- 2 What’s New at a Glance
- What’s in This Chapter?
- What’s New in the December 2004 Release?
- What’s New in the June 2004 Release?
- What’s New in the December 2003 Release?
- What’s New in the September 2003 Release?
- What’s New in the June 2003 Release?
- What’s New in the March 2003 Release?
- What’s New in the December 2002 Release?
- What’s New in the September 2002 Release?
- What’s New in the June 2002 Release?
- What’s New in the March 2002 Release?
- What’s New in the December 2001 Release?
- What’s New in the September 2001 Release?
- What’s New in the June 2001 Release?
- What’s New in the Original 11i v1 Release?
- 3 HP-UX 11i Version 1 Release Overview
- 4 nPartition (Hard Partition) Systems
- 5 Workstation/Server Specific Information
- What’s in This Chapter?
- Supported Systems
- Hardware Enablement
- HP Instant Support Enterprise Edition
- HP-UX V-Class Changes
- SCSI Drivers scsi3 and c720
- SCSI Driver c8xx
- Service Processor (GSP or MP)
- N4000 and rp7400 Server Functionality
- ttytype Support for the N4000 and rp7400 Console
- New stty Options
- Workstations
- 6 HP-UX 11i Version 1 Operating Environment Applications
- What’s in This Chapter?
- The HP-UX 11i Version 1 Operating Environments
- HP-UX 11i v1 Foundation Operating Environment
- Always-Installed Networking and Mass Storage Drivers
- Base VERITAS Volume Manager (VxVM)
- Codeword iCOD
- Event Monitoring Service (EMS)
- GTK+ Libraries
- HP CIFS Client and HP CIFS Server
- HP WBEM Services for HP-UX
- HP-UX Software Development Kit and Runtime Environment for the Java 2 Standard Edition (J2SE) Pla...
- HP-UX Support Tools (Diagnostics): STM, ODE, & EMS Hardware Monitors
- HP-UX Web Server Suite
- HP-UX Apache-based Web Server
- HP-UX Webmin-based Admin
- HP-UX Tomcat-based Servlet Engine
- HP-UX XML Web Server Tools
- Java for HP-UX Add-On Standard C++ Runtime Libraries for the SDK and the RTE
- Judy Libraries
- Mozilla Application Suite
- MySQL
- OpenSSL
- Partition Manager
- Perl Programming Language
- Pluggable Authentication Module (PAM) Kerberos
- Plug-In for the Java 2 Platform for Mozilla
- Servicecontrol Manager (SCM)
- Software Distributor
- Update-UX
- HP-UX 11i v1 Enterprise Operating Environment (EOE)
- HP-UX 11i v1 Mission Critical Operating Environment (MCOE)
- HP-UX 11i v1 Minimal Technical Operating Environment (MTOE)
- HP-UX 11i v1 Technical Computing Operating Environment (TCOE)
- Selectable Applications
- 7 Networking and Mass Storage Drivers
- 8 Installation
- What’s in This Chapter?
- Cold Install Changed
- Update-UX
- Software Distributor
- Multiple Target Management Capabilities Enabled
- POSIX Enhancements and Exceptions
- Change in swlist Hides Superseded Patches by Default
- 64-bit Capability Determined from System, Not /etc/.supported_bits
- CD Searched For Only When Requested
- GUI Streamlined
- Products Rather than Bundles Shown After Auto-Selection
- Software Groups Added to GUI
- Layout Version No Longer Converted Automatically
- Messages Improved or Eliminated
- Output of swlist Changed
- swpackage Produces Note Vs. Warning
- Newest Bundle Selected by Default
- control_utils File Improved
- New Environment Variable, SW_COMPATIBLE, Created
- SD-UX Changes to Patch Installation
- Documentation
- set_parms Enhanced
- 9 General System Administration and Performance Monitoring
- What’s in This Chapter?
- EnhancedMMAP Available on Software Pack
- MtIOscan11i Available on Software Pack
- NEWFUSER11i Available on Software Pack
- HP-UX Buffer Cache Tunable Parameters Deprecated
- HP-UX Newadb Available on Software Pack
- Compressed Dump Available on Software Pack
- Interrupt Migration Available on Software Pack
- Processor Sets Available on Software Pack
- New Option for top
- Changes to System Administration Manager (SAM)
- syslog File Logging Changes for su and login
- HP Process Resource Manager (PRM)
- HP Distributed Print Service Deprecated
- Diagnostics: EMS Hardware Monitors
- Improved ioscan Description Field for PCI Devices
- On Demand Solutions
- 10 Process, Threads, Memory, and Kernel Parameters
- What’s in This Chapter?
- HP-UX Gang Scheduling
- Kernel Threads vs. CMA Threads
- Large Private Data Space
- Memory Windows
- HP-UX SCA Process and Memory Management
- Dynamic Tunables
- Asynchronous Disk Pseudo Driver (async) Compatibility
- System-V InterProcess Communications (IPC)
- SCSI Queue Depth Management
- Changes to mpctl() System Call
- 11 Disk and File Management
- What’s in This Chapter?
- Portable File System (PFS) Obsoleted
- Enhanced AutoFS Available on Software Pack
- DeviceIDs Available on Software Pack
- VERITAS VxFS 3.5 Available on Software Pack
- Additional Support for Striping and Mirroring
- New Whitepaper on File and File System Sizes
- New Version of Journaled File System (JFS)
- Network File System Support on TCP/IP
- Other NFS Changes
- Mounting and Unmounting NFS File Systems Automatically Using AutoFS
- HP Fibrechannel High Availability Disk and Closure
- Fibre Channel Mass Storage Diagnostic Message and Kernel Tunable
- 12 Internet and Networking Services
- 13 Security
- What’s in This Chapter?
- HP-UX Shadow Passwords
- HP-UX Strong Random Number Generator Available on Software Pack
- Boot Authenticator for Standard Mode of HP-UX Available on Software Pack
- HP-UX Host Intrusion Detection System (HIDS)
- Generic Security Services for Developing Secure Applications
- Execute Protected Stacks
- Auditing Commands/System to be Updated
- Configurable Security Features
- Password History Feature on Trusted Systems
- Kerberos Client Software
- HP-UX Kerberos Server Version 2.0
- 14 Compatibility
- 15 Programming
- What’s in This Chapter?
- HP-UX Shared Memory Extensions Available on Software Pack
- HP-UX Software Transition Kit (STK)
- Libraries
- Miscellaneous
- The pstat_getfile() Interface Deprecated
- Transition Links Deprecated
- Perl Programming Language
- Linker and Object File Tools (ld, crt0.o, dld.sl, libdld.sl, chatr, and odump)
- Changes to the linker/dld Interface
- Instrumented Code Using PBO or +O4 Optimization
- HP DCE/9000
- Extensions to pstat()
- Changes to sendfile
- Machine Identifier Changes to confstr
- 16 Internationalization
- What’s in This Chapter?
- Deprecated Functionality
- Unicode Character Set
- Corrected Character Mappings to iconv(1) and iconv(3C)
- EURO (ISO 8859-15 Locales)
- Euro - ISO 10646/Unicode Support
- Asian System Environment (ASE)
- Enhanced Print Capabilities in the Asian System Environment
- Multibyte Support Extension and Unix98 Support
- 17 Licensing Products
Security
Kerberos Client Software
Chapter 13
289
Kerberos Client Software
new at 11i
original release
Kerberos is a network authentication protocol. Kerberos Client Software, now provided
with HP-UX 11i, enables integrating HP-UX into a secure enterprise environment. It
provides tools and libraries to perform authentication and secure communication.
The Kerberos protocol is designed to provide strong authentication for client/server
applications by using secret-key cryptography. It uses strong cryptography so that a
client can prove its identity to a server and vice versa across an insecure network
connection. After the client and the server have established their identities, they can
also encrypt all of their communications to assure privacy and data integrity.
Kerberos Client Software is based on MIT Kerberos V5 1.1.1. It consists of libraries,
header files, manpages, and Kerberos utilities which help in performing command line
or programmatic authentication. Data encryption APIs can be used to protect data
transmitted over the Internet. Kerberos Client Software supports both 32- and 64-bit
development. The 64-bit libraries are placed in the /usr/lib/pa20_64 directory.
Libraries
The following libraries are included:
• /usr/lib/libkrb5.sl, /usr/lib/pa20_64/libkrb5.sl:
All of the Kerberos APIs are implemented by this library. This library implements
APIs for authentication, verifying tickets, creating authenticator, context
management, etc. For more information see libkrb5 (3).
• /usr/lib/libcom_err.sl, /usr/lib/pa20_64/libcom_err.sl:
This library implements com_err APIs. The com_err() functions print appropriate
error messages to the stderr based on the error code returned by Kerberos APIs. For
more information see libkrb5 (3).
• /usr/libk5crypto.sl, /usr/lib/pa20_64/libk5crypto.sl:
This library provides APIs for encryption and decryption. Internally, it uses DES
(Data Encryption Standard). Currently, it supports 56-bit DES and is used by the
Kerberos APIs. For more information see libkrb5 (3).
• /usr/lib/gss/libgssapi_krb5.sl, /usr/lib/pa20_64/gss/libgssapi_krb5.sl:
This contains the Kerberos support for GSS API as per RFC 2743/2744. This library
is used by /usr/lib/libgss.sl, which is part of the GSS API product. For more
information, see libgss (4) and gssapi (5) and the previous section.
Header Files
• /usr/include/krb5.h
• /usr/include/profile.h
• /usr/include/com_err.h
Utilities
• /usr/bin/kinit: obtain and cache the Kerberos ticket-granting ticket. See kinit (1).