Kerberos Client Version E.1.6.
© Copyright 2008 Hewlett-Packard Development Company, L.P Legal Notices Copyright 2008 Hewlett-Packard Development Company, L.P. Confidential computer software. Valid license from HP required for possession, use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor's standard commercial license.
1 Kerberos Client E.1.6.2 Release Notes Information in this document applies to the Web release of Kerberos Client E.1.6.2 for HP-UX 11i v3. Announcement Kerberos Client (krb5client) is a Web upgrade for KRB5-Client. KRB5-Client is a part of the core HP-UX 11i v3 operating system. HP-UX provides Kerberos Client software including libraries, header files, and utilities for implementing secured client/server applications in either 32-bit or 64-bit development environments.
Table 1-1 Kerberos Client PA-RISC and Itanium Libraries (continued) Architecture Library Name / Location Functionality PA-RISC 32–bit • /usr/lib/libk5crypto.sl -> /usr/lib/libk5crypto.1 • /usr/lib/libk5crypto.1 -> /opt/krb5client/lib/libk5crypto.1 64–bit • /usr/lib/pa20_64/libk5crypto.sl -> /usr/lib/pa20_64/libk5crypto.1 • /usr/lib/pa20_64/libk5crypto.1 -> /opt/krb5client/lib/pa20_64/libk5crypto.
Table 1-1 Kerberos Client PA-RISC and Itanium Libraries (continued) Architecture Library Name / Location Functionality Itanium 32–bit Authenticate users, verify tickets, create authenticator, • /usr/lib/hpux32/libkrb5.so -> and manage the context. /usr/lib/hpux32/libkrb5.so.1 • /usr/lib/hpux32/ libkrb5.so.1 -> /opt/krb5client/lib/hpux32/libkrb5.so.1 64–bit • /usr/lib/hpux64/libkrb5.so -> /usr/lib/hpux64/libkrb5.so.1 • /usr/lib/hpux64/libkrb5.so.1 -> /opt/krb5client/lib/hpux64/libkrb5.so.
Table 1-1 Kerberos Client PA-RISC and Itanium Libraries (continued) Architecture Library Name / Location Functionality Itanium 32–bit • /usr/lib/hpux32/libgss.so –> /usr/lib/hpux32/libgss.so.1 • /usr/lib/hpux32/libgss.so.1 –> /opt/krb5client/lib/hpux32/gss/ libgssapi_krb5.so.1 64–bit • /usr/lib/hpux64/libgss.so -> /usr/lib/hpux64/libgss.so.1 • /usr/lib/hpux64/libgss.so.1 -> /opt/krb5client/lib/hpux64/gss/ libgssapi_krb5.so.1 Kerberos-mechanism specific library used by GSSAPI (/usr/lib/libgss.
Table 1-2 Kerberos Client Utilities (continued) Utility Function /usr/bin/kcpytkt ->/opt/krb5client/bin/kcpykt Copies the service ticket between credential caches /usr/bin/kdeltkt ->/opt/krb5client/bin/kdeltkt Deletes the service ticket from the credential cache 1 The -> symbol indicates that the core file links to the corresponding file in the krb5client product. Kerberos Client includes the following header files: • /usr/include/profile.h -> /opt/krb5client/include/profile.h • /usr/include/krb5.
Table 1-3 Encryption Types supported by Kerberos Client E.1.6.2 (continued) Encryption Type Description des-hmac-sha1 DES with HMAC/sha1 arcfour-hmac ArcFour with HMAC/md5 rc4-hmac ArcFour with HMAC/md5 This encryption type is an alias to the arcfour-hmac encryption type. If you specify rc4-hmac in the configuration file, then it’s behavior is the same as arcfour-hmac. arcfour-hmac-md5 ArcFour with HMAC/md5 This encryption type is an alias to the arcfour-hmac encryption type.
What Is New in This Version Kerberos Client E.1.6.
corresponding .k5login files in the user's home directory while making authorization decisions. The format of the entries in the new files in /etc/krb5 continues to be the same as that of the .k5login file in the user's home directory. For detailed product information, installing and configuring instructions, troubleshooting and sample configuration files, see Configuration Guide for Kerberos Client Products on HP-UX (5991-7718).
3. 4. 5. Fill out the registration form, and ensure that you select HP-UX 11i v3 as the operating system. Download the Kerberos Client Software Depot and move it to the /tmp directory. Verify if the file downloaded correctly by entering the following command: # swlist -d @ /tmp/ The following output is displayed if the file is downloaded correctly: # Initializing... # Contacting target "localhost"... # # Target: localhost:/tmp/KRB5CLIENT.depot # # # Bundle(s): # KRB5CLIENT E.1.6.
