Kerberos Client Version C.1.3.5.11 Release Notes (5900-1524, January 2011)

1 Kerberos Client C.1.3.5.11 release notes
Information in this document applies to Kerberos Client C.1.3.5.11 for HP-UX 11i v1.
Announcement
HP-UX provides Kerberos Client software including libraries, header files, and utilities for
implementing secured client/server applications in either 32-bit or 64-bit development environments.
Kerberos Client (KRB5-Client) is a part of the core HP-UX 11i v1 operating system.
Table 1 lists the libraries that Kerberos Client supports on HP-UX 11i v1. The symbolic links are
created for backward compatibility.
Table 1 Kerberos Client PA-RISC and Itanium libraries
Functionality64-bit32-bitArchitecture
Authenticates users,
verifies tickets, creates
authenticator, and
manages the context
/usr/lib/pa20_64/ libkrb5.sl
-> /usr/lib/pa20_64/
libkrb5.1
/usr/lib/libkrb5.sl
->/usr/lib/libkrb5.1
PA-RISC
Prints appropriate
error messages to
stderr, based on the
error code returned by
the Kerberos APIs
/usr/lib/pa20_64/
libcom_err.sl ->
/usr/lib/pa20_64/
libcom_err.1
/usr/lib/ libcom_err.sl ->
/usr/lib/libcom_err.1
PA-RISC
Encrypts (using DES,
3DES, AES, and RC4
cryptographic
algorithms) and
decrypts all
communication
between users to
ensure privacy and
data integrity
/usr/lib/pa20_64/
libk5crypto.sl ->
/usr/lib/pa20_64/
libk5crypto.1
/usr/lib/ libk5crypto.sl ->
/usr/lib/libk5crypto.1
PA-RISC
Kerberos mechanism
specific library used
by GSSAPI
(/usr/lib/libgss.
sl)
/usr/lib/pa20_64/ gss/
libgssapi_krb5.sl
-> /usr/lib/pa20_64/
gss/libgssapi_krb 5.1
/usr/lib/gss/
libgssapi_krb5.sl ->
/usr/lib/gss/libgssapi_
krb5.1
PA-RISC
The client libraries are based on MIT Kerberos V5 1.3.5 release. The KRB5-Client libraries support
DES, 3DES, RC4, and AES, as specified in RFC 1510 of the IETF. This release of Kerberos Client
is interoperable with Microsoft Windows ® 2000 and 2003.
Table 2 lists and describes the utilities that Kerberos Client includes.
Table 2 Kerberos Client utilities
FunctionUtility
Obtains and caches the Kerberos ticket-granting ticket/usr/bin/kinit ->/opt/krb5client/bin/kinit
Lists cached Kerberos tickets/usr/bin/klist -> /opt/krb5client/bin/klist
Prints key version numbers of Kerberos principals/usr/bin/kvno -> /opt/krb5client/bin/kvno
Changes a user’s Kerberos password/usr/bin/kpasswd -> /opt/krb5client/bin/
kpasswd
4 Kerberos Client C.1.3.5.11 release notes