HP-UX 11i Version 1.6 Release Notes

Other Functionality
KRB5-Client and GSS-API
Chapter 8
133
KRB5-Client and GSS-API
The KRB5-Client product helps to provide Kerberos authentication and strong
cryptography for secure communication over the network.
The Generic Security Service Application Programming Interface (GSS-API)
provides security services for applications independent of the various underlying
security mechanisms. The services include authentication, integrity, and/or
confidentiality services.
Summary of Change
Both KRB5-Client and GSS-API are now provided in Native IPF mode. The versions of
KRB5-Client and GSS-API that are delivered as part of HP-UX 11i v1.6. are the same as
those delivered on HP-UX 11i.
The following products are available in HP-UX 11i v1.6 (IA Release):
• KRB5-Client
•GSS-API
Details of Change
KRB5-Client:
KRB5-Client has two additional filesets for 32 and 64-bit IA64 versions
of the Kerberos Client libraries. The 32 and 64-bit IA64 libraries are
available in the /usr/lib/hpux32 and /usr/lib/hpux64 directories
respectively.
GSS-API:
GSS-API has two additional filesets for 32 and 64-bit IA64 versions of
libgss.so. The 32 and 64-bit libraries are available in the
/usr/lib/hpux32 and /usr/lib/hpux64 directories respectively.
Impact
Users must recompile their existing Kerberos and GSS-API applications to take
advantage of the IPF features.
Compatibility
Kerberos/GSS-API applications built on PA-RISC systems can run on IA64 systems (in
the PA-RISC mode).
Users have the choice of using either the PA-RISC or IA64 version of the Kerberos Client
and GSS-API libraries.
Performance
Applications might experience performance degradation if run in PA-RISC mode on an
IA64 system.