Configuration Guide for Kerberos Client Products on HP-UX 11.0 | HP-UX 11i v1 | HP-UX 11i v1.6 | HP-UX 11i v2

Introduction to the Kerberos Products and GSS-API
Secure Internet Services
Chapter 2 45
As shown in Figure 2-5, SIS invokes libsis.sl currently, and may
change to libkrb5.sl in the future. When SIS is enabled at the
application client, the password is not sent to the application server.
Instead, SIS uses an encrypted ticket each time the user requests a
remote service. As shown in Figure 2-3 above, the client requests
credentials from KDC in Step 1 and obtains credentials for the remote
host in Step 2. Using the credentials, the application client creates an
authenticator and sends the authenticator and the service ticket to the
remote host. The Kerberized telnet server on the remote host verifies
the user identity by decrypting the service ticket.
To turn on SIS, issue the following command at the HP-UX command
prompt:
inetsvcs_sec enable
NOTE The library, libsis.sl, will be supported upto the HP-UX 11i v1.5
release. From the HP-UX 11i v1.6 release onwards the library,
libkrb5.so will be supported.