Kerberos Client D.1.6.2 Release Notes

ManualsBrandsHP ManualsSoftwareHP-UX Kerberos Data Security Software

Kerberos Client Version D.1.6.2

Release Notes

HP Part Number: 5992-4802

Published: May 2008

Edition: HP-UX 11i v2

Summary of content (14 pages)

PAGE 1
Kerberos Client Version D.1.6.
PAGE 2
© Copyright 2008 Hewlett-Packard Development Company, L.P Legal Notices Copyright 2008 Hewlett-Packard Development Company, L.P. Confidential computer software. Valid license from HP required for possession, use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor's standard commercial license.
PAGE 3
Table of Contents 1 Kerberos Client D.1.6.2 Release Notes..........................................................................................5 Announcement.....................................................................................................................5 Encryption Types Supported by Kerberos Client...........................................................9 What Is New in This Version..............................................................................................
PAGE 4
List of Tables 1-1 1-2 1-3 1-4 Kerberos Client Libraries on PA-RISC (PA) and Itanium (IA) Architecture................6 Kerberos Client Utilities................................................................................................8 Encryption Types supported by Kerberos Client D.1.6.2.............................................9 System Requirements for Installing Kerberos Client D.1.6.2......................................
PAGE 5
1 Kerberos Client D.1.6.2 Release Notes Information in this document applies to the Web release of Kerberos Client D.1.6.2 for HP-UX 11i v2. Announcement Kerberos Client (krb5client) is a Web upgrade for KRB5-Client. KRB5-Client is a part of the core HP-UX 11i v2 operating system. HP-UX provides Kerberos Client software including libraries, header files, and utilities for implementing secured client/server applications in either 32-bit or 64-bit development environments.
PAGE 6
Table 1-1 Kerberos Client Libraries on PA-RISC (PA) and Itanium (IA) Architecture Architecture Library Name / Location Functionality PA-RISC 32–bit Authenticate users, verify tickets, create authenticator, and manage the context. • /usr/lib/libkrb5.sl -> /opt/krb5client/ lib/libkrb5.1 64–bit • /usr/lib/pa20_64/ libkrb5.sl -> /opt/krb5client/lib/pa20_64/ libkrb5.1 32–bit • /usr/lib/ libcom_err.sl -> /opt/krb5client/lib/ libcom_err.
PAGE 7
Table 1-1 Kerberos Client Libraries on PA-RISC (PA) and Itanium (IA) Architecture (continued) Architecture Library Name / Location Functionality PA-RISC 32–bit Ensures thread-safety for all the Kerberos libraries • /usr/lib/ libkrb5support.sl -> /opt/krb5client/lib/ libkrb5support.1 64–bit • /usr/lib/pa20_64/ libkrb5support.sl -> /opt/krb5client/lib/ libkrb5support.1 Itanium 32–bit Authenticate users, verify tickets, • /usr/lib/hpux32/libkrb5.so create authenticator, and manage the context.
PAGE 8
Table 1-1 Kerberos Client Libraries on PA-RISC (PA) and Itanium (IA) Architecture (continued) Architecture Library Name / Location Functionality Itanium 32–bit Kerberos-mechanism specific library used by GSSAPI (/usr/lib/libgss.sl) • /usr/lib/hpux32/gss/ libgssapi_krb5.so -> /opt/krb5client/lib/hpux32/ gss/libgssapi_krb5.so.1 64–bit • /usr/lib/hpux64/ gss/ libgssapi_krb5.so -> /opt/krb5client/lib/hpux64/ gss/ libgssapi_krb5.so.1 32–bit • /usr/lib/hpux32/ libkrb5support.
PAGE 9
Table 1-2 Kerberos Client Utilities (continued) Utility Function /usr/sbin/ktutil -> /opt/krb5client/sbin/ktutil Maintains the Kerberos keytab file /usr/bin/kdestroy -> /opt/krb5client/bin/kdestroy Destroys the user’s active Kerberos tickets /usr/bin/kcpytkt -> /opt/krb5client/bin/kcpykt Copies the service ticket between credential caches /usr/bin/kdeltkt -> /opt/krb5client/bin/kdeltkt Deletes the service ticket from the credential cache 1 The -> symbol indicates that the core file links to the c
PAGE 10
Table 1-3 Encryption Types supported by Kerberos Client D.1.6.2 (continued) Encryption Type Description des3-cbc-sha1-kd Triple DES cbc mode with HMAC/sha1 This encryption type is an alias to the des3-cbc-sha1 encryption type. If you specify des3-cbc-sha1-kd in the configuration file, then it’s behavior is the same as des3-cbc-sha1. des-hmac-sha1 DES with HMAC/sha1 arcfour-hmac ArcFour with HMAC/md5 rc4-hmac ArcFour with HMAC/md5 This encryption type is an alias to the arcfour-hmac encryption type.
PAGE 11
What Is New in This Version Kerberos Client D.1.6.
PAGE 12
corresponding .k5login files in the user's home directory while making authorization decisions. The format of the entries in the new files in /etc/krb5 continues to be the same as that of the .k5login file in the user's home directory. For detailed product information, installing and configuring instructions, troubleshooting and sample configuration files, see Configuration Guide for Kerberos Client Products on HP-UX (5991-7718).
PAGE 13
1. 2. 3. 4. 5. Log in as superuser. Download the depot from the Software Depot at: http://h20293.www2.hp.com/. Fill out the registration form, and ensure that you select HP-UX 11i v2 as the operating system. Download the Kerberos Client Software Depot and move it to the /tmp directory. Verify if the file downloaded correctly by entering the following command: # swlist -d @ /tmp/ The following output is displayed if the file is downloaded correctly: # Initializing...
PAGE 14
Related Documentation For more information about Kerberos Client, see Configuration Guide for Kerberos Client Products on HP-UX (5991-7718). 14 Kerberos Client D.1.6.