HP-UX 11i Release Notes (December 2000)

Security
Generic Security Services for Developing Secure Applications (new)
Chapter 11 211
• The /etc/gss/gsscred.conf is a configuration file that selects how
the underlying mechanism stores the gsscred table. The gsscred
table is used to store the mapping between a security principal and
the UNIX uid. In this release, the supported gsscred backend
mechanism is only flat files. Therefore, the entry “files” must be
specified in /etc/gss/gsscred.conf for the successful operation of
the library.
The 32-bit and 64-bit versions of libgss.sl library is available at the
/usr/lib and /usr/lib/pa20_64 directories respectively.
Special Considerations
Symbol Clashes
Since the symbols of GSS APIs in the libdce libraries clash with the
symbols of libgss.sl, application programmers who want to use GSS
API and DCE together may need to resolve the symbol clashes by linking
the libgss.sl library first and then the libdce library.
Size Requirements
A minimum of 32MB RAM and 1.5MB hard disk space will be required
for installation and usage of the product on HP-UX 11i systems.
Compatibility
The libgss.sl library has been tested with Kerberos V5 backend
mechanism library (/usr/lib/gss/libgssapi_krb5.sl) and is fully
compatible. This library is in the KRB5-Client Software. See the next
section for more information.
Documentation Changes
There are new manpages for each of the API’s of the GSS API product
under the /usr/share/man directory. These manpages are different
from the manpages for DCE GSS API which is available under the
/opt/dce/share/man directory. For general informationabout GSS API,
refer to the gssapi (5) manpage and for information about libgss.sl,
refer libgss (4) manpage.
There is also information about GSS API in Network Security Features
for HP-UX 11i at:
http://www.unixsolutions.hp.com/products/hpux/hpux11/whitepapers/netsecur.pdf