HP-UX 11i June 2001 Release Notes

Security

Kerberos Client Software (new at 11i original release)

Chapter 11 223

• /usr/libk5crypto.sl, /usr/lib/pa20_64/libk5crypto.sl:

This library provides APIs for encryption and decryption. Internally,

it uses DES (Data Encryption Standard). Currently, it supports 56-bit

DES. It is used by libkrb5.sl APIs. For more information see

libkrb5 (3).

• /usr/lib/gss/libgssapi_krb5.sl,

/usr/lib/pa20_64/gss/libgssapi_krb5.sl:

This contains the Kerberos support for GSS API as per RFC

2743/2744. This library is used by /usr/lib/libgss.sl which is part

of the GSS API product. For more information, see libgss (4) and

gssapi (5) and the previous section.

Header Files

• /usr/include/krb5.h

• /usr/include/profile.h

• /usr/include/com_err.h

Utilities

• /usr/bin/kinit: obtain and cache the Kerberos ticket-granting

ticket. See kinit (1)

• /usr/bin/klist: list cached Kerberos tickets. See klist (1)

• /usr/bin/kdestroy: destroy Kerberos tickets. See kdestroy (1)

• /usr/bin/kvno: print key version numbers of Kerberos principals.

See kvno (1)

• /usr/bin/kpasswd: change a user’s Kerberos password. See kpasswd

(1)

• /usr/sbin/ktutil: Kerberos keytab ﬁle maintenance utility. See

ktutil (1)

Manpages

• Manpages in /usr/share/man/man1.Z directory: kinit (1), klist (1),

kdestroy (1), kvno (1), kpasswd (1), and ktutil (1)

• Manpages in /usr/share/man/man4.Z directory: krb5.conf (4)

• Manpages in /usr/share/man/man3.Z directory: libkrb5 (3)