Kerberos Client Version E.1.6.2.
© Copyright 2009 Hewlett-Packard Development Company, L.P Legal Notices Copyright 2009 Hewlett-Packard Development Company, L.P. Confidential computer software. Valid license from HP required for possession, use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor's standard commercial license.
Table of Contents 1 Kerberos Client E.1.6.2.04 Release Notes...................................................................5 Announcement.......................................................................................................................................5 Encryption Types Supported by Kerberos Client.............................................................................8 What Is New in This Version...................................................................................
List of Tables 1-1 1-2 1-3 1-4 4 Kerberos Client PA-RISC and Itanium Libraries............................................................................5 Kerberos Client Utilities..................................................................................................................8 Encryption Types supported by Kerberos Client E.1.6.2.04............................................................8 System Requirements for Installing Kerberos Client E.1.6.2.04..................................
1 Kerberos Client E.1.6.2.04 Release Notes Information in this document applies to the Web release of Kerberos Client E.1.6.2.04 for HP-UX 11i v3. Announcement Kerberos Client (krb5client) is a Web upgrade for KRB5-Client. KRB5-Client is a part of the core HP-UX 11i v3 operating system. HP-UX provides Kerberos Client software including libraries, header files, and utilities for implementing secured client/server applications in either 32-bit or 64-bit development environments.
Table 1-1 Kerberos Client PA-RISC and Itanium Libraries (continued) Architecture Library Name / Location Functionality PA-RISC 32–bit • /usr/lib/libk5crypto.sl -> /usr/lib/ libk5crypto.1 • /usr/lib/libk5crypto.1 -> /opt/krb5client/ lib/libk5crypto.1 64–bit • /usr/lib/pa20_64/libk5crypto.sl -> /usr/lib/ pa20_64/libk5crypto.1 • /usr/lib/pa20_64/libk5crypto.1 -> /opt/ krb5client/lib/pa20_64/libk5crypto.
Table 1-1 Kerberos Client PA-RISC and Itanium Libraries (continued) Architecture Library Name / Location Functionality Itanium 32–bit • /usr/lib/hpux32/libkrb5.so -> /usr/lib/ hpux32/libkrb5.so.1 • /usr/lib/hpux32/ libkrb5.so.1 -> /opt/ krb5client/lib/hpux32/libkrb5.so.1 64–bit • /usr/lib/hpux64/libkrb5.so -> /usr/lib/ hpux64/libkrb5.so.1 • /usr/lib/hpux64/libkrb5.so.1 -> /opt/ krb5client/lib/hpux64/libkrb5.so.1 Authenticate users, verify tickets, create authenticator, and manage the context.
Table 1-2 Kerberos Client Utilities Utility Function /usr/bin/kinit ->/opt/krb5client/bin/kinit 1 Obtains and caches the Kerberos ticket-granting ticket /usr/bin/klist -> /opt/krb5client/bin/klist Lists cached Kerberos tickets /usr/bin/kvno -> /opt/krb5client/bin/kvno Prints key version numbers of Kerberos principals /usr/bin/kpasswd -> /opt/krb5client/bin/ kpasswd Changes a user’s Kerberos password /usr/sbin/ktutil -> /opt/krb5client/sbin/ ktutil Maintains the Kerberos keytab file /usr/bin/kdes
Table 1-3 Encryption Types supported by Kerberos Client E.1.6.2.04 (continued) Encryption Type Description arcfour-hmac ArcFour with HMAC/md5 rc4-hmac ArcFour with HMAC/md5 This encryption type is an alias to the arcfour-hmac encryption type. If you specify rc4-hmac in the configuration file, then it’s behavior is the same as arcfour-hmac. arcfour-hmac-md5 ArcFour with HMAC/md5 This encryption type is an alias to the arcfour-hmac encryption type.
Features Supported From Kerberos Client Version 1.3.5 Kerberos Client version E.1.6.2.04 also supports the following features from Kerberos Client version 1.3.
Table 1-4 System Requirements for Installing Kerberos Client E.1.6.2.04 (continued) Component Requirement Disk space requirement for the krb5client product 5 MB Disk space requirement for the complete KRB5CLIENT bundle 36 MB Software availability in native languages English only Patch Requirements Patch PHSS_39766 is required for Kerberos Client E.1.6.2.04. Installing Kerberos Client E.1.6.2.04 To install Kerberos Client E.1.6.2.04, complete the following steps: 1. 2. 3. 4. 5. Log in as superuser.
Defect Fixes in This Version The following defects are fixed in Kerberos Client E.1.6.2.04: QXCR1000961607 Symptom: HP-UX Kerberos Client does not support the DES-CBC-RAW or DES3-CBC-RAW encryption standards. Defect Description: HP-UX Kerberos Client does not support the DES-CBC-RAW or DES3-CBC-RAW encryption standards. Resolution: The Kerberos Client now supports the DES-CBC-RAW and DES3-CBC-RAW encryption standards.
