Kerberos Client E.1.6.2.04 Release Notes

Table 1-2 Kerberos Client Utilities
FunctionUtility
Obtains and caches the Kerberos ticket-granting ticket
/usr/bin/kinit ->/opt/krb5client/bin/kinit
1
Lists cached Kerberos tickets
/usr/bin/klist -> /opt/krb5client/bin/klist
Prints key version numbers of Kerberos principals
/usr/bin/kvno -> /opt/krb5client/bin/kvno
Changes a user’s Kerberos password
/usr/bin/kpasswd -> /opt/krb5client/bin/
kpasswd
Maintains the Kerberos keytab file
/usr/sbin/ktutil -> /opt/krb5client/sbin/
ktutil
Destroys the user’s active Kerberos tickets
/usr/bin/kdestroy -> /opt/krb5client/bin/
kdestroy
Copies the service ticket between credential caches
/usr/bin/kcpytkt ->/opt/krb5client/bin/kcpykt
Deletes the service ticket from the credential cache
/usr/bin/kdeltkt ->/opt/krb5client/bin/kdeltkt
1 The -> symbol indicates that the core file links to the corresponding file in the krb5client product.
Kerberos Client includes the following header files:
• /usr/include/profile.h -> /opt/krb5client/include/profile.h
• /usr/include/krb5.h -> /opt/krb5client/include/krb5.h
• /usr/include/com_err.h -> /opt/krb5client/include/com_err.h
• /usr/include/krb5/gssapi.h -> /opt/krb5client/include/krb5/gssapi.h
Encryption Types Supported by Kerberos Client
Table 1-3 lists the encryption types supported by Kerberos Client E.1.6.2.04.
Table 1-3 Encryption Types supported by Kerberos Client E.1.6.2.04
DescriptionEncryption Type
DES cbc mode with CRC-32des-cbc-crc
DES cbc mode with RSA-MD4des-cbc-md4
DES cbc mode with RSA-MD5des-cbc-md5
DES cbc mode with RSA-MD5
This encryption type is an alias to the des-cbc-md5 encryption type. If
you specify des in the configuration file, then it’s behavior is the same
as des-cbc-md5.
des
DES cbc mode rawdes-cbc-raw
Triple DES cbc mode rawdes3-cbc-raw
Triple DES cbc mode with HMAC/sha1des3-cbc-sha1
Triple DES cbc mode with HMAC/sha1
This encryption type is an alias to the des3-cbc-sha1 encryption type. If
you specify des3-hmac-sha1 in the configuration file, then it’s behavior
is the same as des3-cbc-sha1.
des3-hmac-sha1
Triple DES cbc mode with HMAC/sha1
This encryption type is an alias to the des3-cbc-sha1 encryption type. If
you specify des3-cbc-sha1-kd in the configuration file, then it’s behavior
is the same as des3-cbc-sha1.
des3-cbc-sha1-kd
DES with HMAC/sha1des-hmac-sha1
8 Kerberos Client E.1.6.2.04 Release Notes