Kerberos Client Version C.1.3.5.10 release notes (5992-0789), June 2010

Table 1-2 Kerberos Client utilities (continued)
FunctionUtility
Maintains the Kerberos keytab file
/usr/sbin/ktutil -> /opt/krb5client/sbin/
ktutil
Destroys the user’s active Kerberos tickets
/usr/bin/kdestroy -> /opt/krb5client/bin/
kdestroy
Kerberos Client includes the following header files:
• /usr/include/profile.h -> /opt/krb5client/include/profile.h
• /usr/include/krb5.h -> /opt/krb5client/include/krb5.h
• /usr/include/com_err.h -> /opt/krb5client/include/com_err.h
• /usr/include/krb5/gssapi.h -> /opt/krb5client/include/krb5/gssapi.h
What is new in this version
Kerberos Client C.1.3.5.10 is a defect fix release and does not include any new features. For more
information on the defects fixed in this release, see “Defect Fixes in this Version” (page 10).
Features supported from Kerberos Client Version 1.3.5
Kerberos Client version C.1.3.5.10 also supports the following features from Kerberos Client
version 1.3.5.06:
• SASL/GSS-API bind to Netscape Directory Server used to fail when SSL was enabled
• Support for powerful cryptographic algorithms
This version of Kerberos Client software supports 3DES, AES, and RC4
• Support for IPv6
IPv6 support is enabled on this version of Kerberos Client software
• Support for TCP
Kerberos Client libraries can now use TCP to connect to the Key Distribution Center (KDC).
Libraries can use TCP to communicate with Microsoft KDCs (domain controllers) if they
issue tickets with excess PAC data.
• Security fixes up to version 1.3.5 made by MIT in the open source version of Kerberos Client
For detailed product information, installing and configuring instructions, troubleshooting and
sample configuration files, see Configuration Guide for Kerberos Client Products on HP-UX
(5991-7718).
Encryption types supported by Kerberos Client
Table 1-3 lists the encryption types supported by Kerberos Client C.1.3.5.10.
Table 1-3 Encryption types supported by Kerberos Client C.1.3.5.10
DescriptionEncryption Type
DES cbc mode with CRC-32des-cbc-crc
DES cbc mode with RSA-MD4des-cbc-md4
DES cbc mode with RSA-MD5des-cbc-md5
DES cbc mode with RSA-MD5
This encryption type is an alias to the des-cbc-md5 encryption type. If
you specify des in the configuration file, then it’s behavior is the same
as des-cbc-md5.
des
6 Kerberos Client C.1.3.5.10 release notes