HP CIFS Server and Kerberos

26
Chapter 6 Support Matrices
Here is a matrix that summarizes the Kerberos components and how they interact for HP CIFS Server.
The encryption types are defined in HP-UX /etc/krb5.conf.
Windows 2000
Adv Server
(no hotfixes)
Windows 2003
Adv Server
(no hotfixes)
Windows 2003R2
Adv Server
(no hotfixes)
HP-UX Kerberos
1.0
Default on 11iv1 and
11iv2
DES-CBC-CRC: Works
DES-CBC-MD5 : Works
RC4-HMAC :
unsupported enc type
Keytab : unsupported
DES-CBC-CRC: Works
DES-CBC-MD5 : Works
RC4-HMAC :
unsupported enc type
Keytab : unsupported
Not Available
HP-UX Kerberos
1.3.5.06
Available on
www.software.hp.com
DES-CBC-CRC: Works
DES-CBC-MD5 : Works
RC4-HMAC : Works
Keytab : Works
DES-CBC-CRC: Works
DES-CBC-MD5 : Works
RC4-HMAC : Works
Keytab : Works
DES-CBC-CRC: Works
DES-CBC-MD5 : Works
RC4-HMAC : Works
Keytab : Works
HP-UX Kerberos
1.6.2 (D or E)
Default on 11iv3
Available on
www.software.hp.com
Not Available DES-CBC-CRC: Works
DES-CBC-MD5 : Works
RC4-HMAC : Works
Keytab : Works
DES-CBC-CRC: Works
DES-CBC-MD5 : Works
RC4-HMAC : Works
Keytab : Works
Caveats:
1. All “Works” indicated enc types work for kinit and “net ads join”
2. Regardless of the /etc/krb5.conf enc type, the HP CIFS Server service ticket is
encrypted in MD5.
3. HP-UX Kerberos 1.3.5 will be available for 11i v2 in February 2005
4. RC4-HMAC is not officially endorsed for HP CIFS Server, but testing proves that it
works.
NOTE: HP CIFS Server does not support Windows Server 2008 at this time (November 2008 Update)