HP-UX 11i June 2001 Release Notes

Security
Generic Security Services for Developing Secure Applications (new at 11i original
release)
Chapter 11216
• The /etc/gss/qop file contains information about the GSS
API-based quality of protection (QOP) for each underlying security
mechanism.
• The /etc/gss/gsscred.conf is a configuration file that selects how
the underlying mechanism stores the gsscred table. The gsscred
table is used to store the mapping between a security principal and
the UNIX uid. In this release, the supported gsscred backend
mechanism is only flat files. Therefore, the entry “files” must be
specified in /etc/gss/gsscred.conf for the successful operation of
the library.
The 32-bit and 64-bit versions of libgss.sl library is available at the
/usr/lib and /usr/lib/pa20_64 directories respectively.
Special Considerations
Symbol Clashes
Since the symbols of GSS APIs in the libdce libraries clash with the
symbols of libgss.sl, application programmers who want to use GSS
API and DCE together may need to resolve the symbol clashes by linking
the libgss.sl library first and then the libdce library.
Size Requirements
A minimum of 32MB RAM and 1.5MB hard disk space will be required
for installation and usage of the product on HP-UX 11i systems.
Compatibility
The libgss.sl library has been tested with Kerberos V5 backend
mechanism library (/usr/lib/gss/libgssapi_krb5.sl) and is fully
compatible. This library is in the KRB5-Client Software. See the next
section for more information.
Documentation Changes
There are new manpages for each of the API’s of the GSS API product
under the /usr/share/man directory. These manpages are different
from the manpages for DCE GSS API which is available under the
/opt/dce/share/man directory. For general information about GSS API,
refer to the gssapi (5) manpage and for information about libgss.sl,
refer libgss (4) manpage.