HP-UX 11i Release Notes (December 2000)

HP-UX 11i Operating Environments
HP-UX 11i Operating Environment (new)
Chapter 484
NOTE PAM Kerberos is not thread safe.
Coexistence Issues
PAM Kerberos (libpam_krb5.1) and PAM DCE (libpam_dce.1) plug-in
modules can not be stacked together in the pam.conf file because of
different principal styles and credential file paths. If so stacked, the
results will be unpredictable.
The Kerberos system ftp service may list the /etc/issue file before the
expected output. The sis (5) manpage provides detailed information. You
cannot login if the password has expired on a Microsoft Windows 2000
KDC. You will be asked for a new password but you cannot log in. This is
a known problem in Windows 2000.
When changing passwords on a MIT KDC with a version prior to 1.1, up
to 45 seconds may elapse before the password is actually changed due to
the protocol selection mechanism of the change password protocol.
Documentation
The following changes apply for HP-UX 11i:
• The newly created manpage for pam_kerberos is available at:
/usr/share/man/man5.Z/pam_krb5.5
• White Papers:
— Network Security Features of HP-UX 11i
— Integrating HP-UX Account Management and Authentication with
Microsoft Windows 2000. All three are available on the web at:
http://docs.hp.com/
ServiceControl Manager (SCM)
ServiceControl Manager (SCM) Version A.01.01.05 allows you to manage
groups of HP-UX systems from a central server. This helps to reduce IT
costs and makes it easier to manage multiple systems.
For HP-UX 11i, SCM includes the following enhancements: