Configuration Guide for Kerberos Client Products on HP-UX 11.0 | HP-UX 11i v1 | HP-UX 11i v1.6 | HP-UX 11i v2

Introduction to the Kerberos Products and GSS-API

KRB5 Client Software

Chapter 246

KRB5 Client Software

This section presents an overview of the KRB5-Client software, which

consists of libraries, header ﬁles, manpages, and Kerberos utilities. The

section is divided intotwo parts. The followingsubsection, “Libraries and

Header Files”, discusses the libraries and header ﬁles supplied with the

KRB5-Client software. The second subsection,“Kerberos Utilities” on

page 48, discusses the Kerberos utilities.

Libraries and Header Files

Application developers can use the KRB5-Client libraries to develop

secure client/server applications for either 32-bit or 64-bit environments

on any of the HP-UX 11.X platforms.

The client libraries are based on MIT Kerberos V5 1.1.1 release. This

release is compatible with MIT Kerberos 1.2 and interoperable with

Microsoft Windows 2000.

The Kerberos Client Library (libkrb5.so) will replace the KRB-Support

Library (libsis.sl) from the HP-UX 11i v1.6 release onwards.

The KRB5-Client libraries support DES as speciﬁed in RFC 1510 of the

IETF.

Table 2-9 lists and describes the Kerberos client libraries.

Table 2-9 Kerberos Client Libraries

Library Availability Functionality

• Itanium 32 -

/usr/lib/hpux32/libkrb5.so

• PA-RISC 32 - /usr/lib/libkrb5.sl

• Itanium 64 -

/usr/lib/hpux64/libkrb.so

• PA-RISC 64 -

/usr/lib/pa20_64/libkrb5.sl

Authenticate users,

verify tickets, create

authenticator, and

manage the context