Kerberos Client Version C.1.3.5.10 release notes (5992-0789), June 2010

1 Kerberos Client C.1.3.5.10 release notes
Information in this document applies to Kerberos Client C.1.3.5.10 for HP-UX 11i v1.
Announcement
HP-UX provides Kerberos Client software including libraries, header files, and utilities for
implementing secured client/server applications in either 32-bit or 64-bit development
environments. Kerberos Client (KRB5-Client) is a part of the core HP-UX 11i v1 operating system.
Table 1-1 lists the libraries that Kerberos Client supports on HP-UX 11i v1. The symbolic links
are created for backward compatibility.
Table 1-1 Kerberos Client PA-RISC and Itanium libraries
Functionality64-bit32-bitArchitecture
Authenticates users,
verifies tickets, creates
authenticator, and
manages the context
/usr/lib/pa20_64/ libkrb5.sl
-> /usr/lib/pa20_64/
libkrb5.1
/usr/lib/libkrb5.sl
->/usr/lib/libkrb5.1
PA-RISC
Prints appropriate
error messages to
stderr, based on the
error code returned
by the Kerberos APIs
/usr/lib/pa20_64/
libcom_err.sl ->
/usr/lib/pa20_64/
libcom_err.1
/usr/lib/ libcom_err.sl ->
/usr/lib/libcom_err.1
Encrypts (using DES,
3DES, AES, and RC4
cryptographic
algorithms) and
decrypts all
communication
between users to
ensure privacy and
data integrity
/usr/lib/pa20_64/
libk5crypto.sl ->
/usr/lib/pa20_64/
libk5crypto.1
/usr/lib/ libk5crypto.sl ->
/usr/lib/libk5crypto.1
Kerberos mechanism
specific library used
by GSSAPI
(/usr/lib/libgss.
sl)
/usr/lib/pa20_64/ gss/
libgssapi_krb5.sl
-> /usr/lib/pa20_64/
gss/libgssapi_krb 5.1
/usr/lib/gss/
libgssapi_krb5.sl ->
/usr/lib/gss/libgssapi_
krb5.1
The client libraries are based on MIT Kerberos V5 1.3.5 release. The KRB5-Client libraries support
DES, 3DES, RC4, and AES, as specified in RFC 1510 of the IETF. This release of Kerberos Client
is interoperable with Microsoft Windows ® 2000 and 2003.
Table 1-2 lists and describes the utilities that Kerberos Client includes.
Table 1-2 Kerberos Client utilities
FunctionUtility
Obtains and caches the Kerberos ticket-granting ticket
/usr/bin/kinit ->/opt/krb5client/bin/kinit
Lists cached Kerberos tickets
/usr/bin/klist -> /opt/krb5client/bin/klist
Prints key version numbers of Kerberos principals
/usr/bin/kvno -> /opt/krb5client/bin/kvno
Changes a user’s Kerberos password
/usr/bin/kpasswd -> /opt/krb5client/bin/
kpasswd
Announcement 5