HP CIFS Server and Kerberos

103
8.2.1 Wrong Kerberos Libraries
Symptom
If the HP-UX Kerberos version is not supported for a particular operation (keytab support) or
encryption type (RC4-HMAC) then the symptom could be the bad-password pop-up. Other symptoms
would be a bad kinit result.
Problem
The Kerberos library version could be out of date for the attempted operation. The following table
summarizes the libraries version and functionality:
Windows 2000
Adv Server
(no hotfixes)
Windows 2003
Adv Server
(no hotfixes)
Windows 2003R2
Adv Server
(no hotfixes)
HP-UX Kerberos
1.0
Default on 11iv1 and
11iv2
DES-CBC-CRC: Works
DES-CBC-MD5 : Works
RC4-HMAC :
unsupported enc type
Keytab : unsupported
DES-CBC-CRC: Works
DES-CBC-MD5 : Works
RC4-HMAC :
unsupported enc type
Keytab : unsupported
Not Available
HP-UX Kerberos
1.3.5.06
Available on
www.software.hp.com
DES-CBC-CRC: Works
DES-CBC-MD5 : Works
RC4-HMAC : Works
Keytab : Works
DES-CBC-CRC: Works
DES-CBC-MD5 : Works
RC4-HMAC : Works
Keytab : Works
DES-CBC-CRC: Works
DES-CBC-MD5 : Works
RC4-HMAC : Works
Keytab : Works
HP-UX Kerberos
1.6.2 (D or E)
Default on 11iv3
Available on
www.software.hp.com
Not Available DES-CBC-CRC: Works
DES-CBC-MD5 : Works
RC4-HMAC : Works
Keytab : Works
DES-CBC-CRC: Works
DES-CBC-MD5 : Works
RC4-HMAC : Works
Keytab : Works
To display the Kerberos library version:
 swlist –l product | grep krb
Resolution
Update the Kerberos libraries. Current versions are available from www.software.hp.com and are
installable with swinstall.