Kerberos Client Version C.1.3.5.05 Release Notes HP-UX 11i v1 Manufacturing Part Number: 5991-6633 E1006 © Copyright 2006 Hewlett-Packard Development Company, L.P.
Legal Notices The information contained herein is subject to change without notice. Hewlett-Packard makes no warranty of any kind with regard to this manual, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. Hewlett-Packard shall not be held liable for errors contained herein or direct, indirect, special, incidental or consequential damages in connection with the furnishing, performance, or use of this material.
This software is based in part on the Fourth Berkeley Software Distribution under license from the Regents of the University of California. Copyright 1980, 1984, 1986 Novell, Inc. Copyright 1986-1992 Sun Microsystems, Inc. Copyright 1985-86, 1988 Massachusetts Institute of Technology. Copyright 1989-93 The Open Software Foundation, Inc. Copyright 1986 Digital Equipment Corporation. Copyright 1990 Motorola, Inc.
1 Kerberos Client C.1.3.5.05 Release Notes Information in this document applies to the Web release of Kerberos Client C.1.3.5.05 for HP-UX 11i v1.
Kerberos Client C.1.3.5.05 Release Notes Announcement Announcement Kerberos Client (krb5client) is a Web upgrade for KRB5-Client. KRB5-Client is a part of the core HP-UX 11i v1 and HP-UX 11i v2 operating systems. The previous version of Kerberos Client, KRB5-Client, was released as part of the core HP-UX 11i operating system.
Kerberos Client C.1.3.5.05 Release Notes Announcement Table 1-1 lists the libraries that Kerberos Client supports on HP-UX 11i v1. Table 1-1 Architecture Kerberos Client Libraries on HP-UX 11i v1 32-bit 64-bit Functionality /usr/lib/pa20_64/ libkrb5.sl -> /usr/lib/pa20_64/ librb5.1 Authenticates users, verifies tickets, creates authenticator, and manages the context /usr/lib/ libcom_err.sl -> /usr/lib/libcom_err.1 /usr/lib/pa20_64/ libcom_err.sl -> /usr/lib/pa20_64/ libcom_err.
Kerberos Client C.1.3.5.05 Release Notes Announcement The client libraries are based on MIT Kerberos V5 1.3.5 release. The KRB5-Client libraries support DES, 3DES, RC4, and AES, as specified in RFC 1510 of the IETF. This release of Kerberos Client is interoperable with Microsoft Windows 2000 and 2003. Table 1-2 lists and describes the utilities that Kerberos Client includes.
Kerberos Client C.1.3.5.05 Release Notes What Is New in This Version What Is New in This Version Kerberos Client C.1.3.5.05 supports the following new features: • Administrators can now patch the core Kerberos Client even if the Web upgrade is installed on the system. Patch PHSS_34990 patches the core Kerberos Client. This patch is a part of the KRB5CLIENT bundle, and is a prerequisite for installing Kerberos Client C.1.3.5.05.
Kerberos Client C.1.3.5.05 Release Notes What Is New in This Version Example 1-3 If /etc/krb5/.k5login.user1 exists as a symbolic link to the .k5login file in the user’s home directory If user1 attempts to login, the krb5_kuserok() API processes /etc/krb5/.k5login.user1 only if it is owned by root, and if the .k5login file in the user’s home directory is owned by root or the user. Only superusers must have permissions to write to this file.
Kerberos Client C.1.3.5.05 Release Notes Known Problems and Workarounds Known Problems and Workarounds If a kernel threaded DCE application linking to libdcekt uses PAM Kerberos for authentication, it results in core dump. This occurs because of a symbol clash between PAM Kerberos and DCE kernel threads. HP has fixed PAM Kerberos v 1.24 and Kerberos Client C.1.3.5.05. However, you must also install PHSS_28871 to resolve this defect. NOTE Chapter 1 You must have PAM Kerberos v1.24, Kerberos Client C.1.3.
Kerberos Client C.1.3.5.05 Release Notes Installation Requirements for Kerberos Client C.1.3.5.05 on HP-UX 11i v1 Installation Requirements for Kerberos Client C.1.3.5.05 on HP-UX 11i v1 This section discusses the prerequisites for installing Kerberos Client version C.1.3.5.05 on HP-UX 11i v1. System Requirements Table 1-3 specifies the minimum system requirements for installing Kerberos Client C.1.3.5.05. Table 1-3 System Requirements for Installing Kerberos Client C.1.3.5.
Kerberos Client C.1.3.5.05 Release Notes Installation Requirements for Kerberos Client C.1.3.5.05 on HP-UX 11i v1 Patch Requirements Table 1-4 lists the patches you must install before installing Kerberos Client C.1.3.5.05 on HP-UX 11i v1.These patches are a part of the KRB5CLIENT bundle. Table 1-4 Required Patches for Kerberos Client C.1.3.5.
Kerberos Client C.1.3.5.05 Release Notes Installation Requirements for Kerberos Client C.1.3.5.05 on HP-UX 11i v1 Table 1-5 Additional Patches for Kerberos Client on HP-UX 11i v1 Patch /Product Description Included in the KRB5CLIENT Bundle? PHSS_29487 GSS-API Version 1.0 cumulative patch to enable 64-bit functionality of GSS-API with Kerberos backend Yes PHCO_25568 Patch to enable users to use files to resolve host entries.
Kerberos Client C.1.3.5.05 Release Notes Installation Requirements for Kerberos Client C.1.3.5.05 on HP-UX 11i v1 Table 1-5 Chapter 1 Additional Patches for Kerberos Client on HP-UX 11i v1 Patch /Product Description Transport Optional Upgrade Release (TOUR) Product that enables you to use IPv6 with Kerberos Client version C.1.3.5.05. It is available for download at: www.software.hp.
Kerberos Client C.1.3.5.05 Release Notes Installing Kerberos Client C.1.3.5.05 Installing Kerberos Client C.1.3.5.05 To install Kerberos Client C.1.3.5.05, complete the following steps: Step 1. Log in as superuser. Step 2. Download the depot from the Software Depot at: http://h20293.www2.hp.com/. Step 3. Fill out the registration form, and ensure that you select HP-UX 11i v1 as the operating system. Step 4. Download the Kerberos Client Software Depot and move it to the /tmp directory. Step 5.
Kerberos Client C.1.3.5.05 Release Notes Installing Kerberos Client C.1.3.5.05 The swinstall window is displayed. Step 7. Select Mark for Install in the Action menu to select the bundle and the patches that you want to install. Step 8. Select Install in the Action menu. The Install Analysis window is displayed. Step 9. Select OK when the Status Field displays a Ready message. The Install window is displayed and the Kerberos Client installation starts. Step 10.
Kerberos Client C.1.3.5.05 Release Notes Defect Fixes in This Version Defect Fixes in This Version No defect fixes are included in this version of Kerberos Client.
Kerberos Client C.1.3.5.05 Release Notes Known Limitation Known Limitation Kerberos Client Version C.1.3.5.05 libraries are not thread safe.
Kerberos Client C.1.3.5.05 Release Notes Related Documentation Related Documentation For more information about Kerberos Client, see Configuration Guide for Kerberos Client Products on HP-UX (T1417-90006).
