Kerberos Client Version D.1.6.2.
© Copyright 2009 Hewlett-Packard Development Company, L.P Legal Notices Copyright 2009 Hewlett-Packard Development Company, L.P. Confidential computer software. Valid license from HP required for possession, use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor's standard commercial license.
Table of Contents 1 Kerberos Client D.1.6.2.04 Release Notes...................................................................5 Announcement.......................................................................................................................................5 Encryption Types Supported by Kerberos Client.............................................................................6 What Is New in This Version...................................................................................
List of Tables 1-1 1-2 1-3 1-4 4 Kerberos Client Libraries on PA-RISC (PA) and Itanium (IA) Architecture..................................5 Kerberos Client Utilities..................................................................................................................6 Encryption Types supported by Kerberos Client D.1.6.2.04...........................................................6 System Requirements for Installing Kerberos Client D.1.6.2.04...................................................
1 Kerberos Client D.1.6.2.04 Release Notes Information in this document applies to the Web release of Kerberos Client D.1.6.2.04 for HP-UX 11i v2. Announcement Kerberos Client (krb5client) is a Web upgrade for KRB5-Client. KRB5-Client is a part of the core HP-UX 11i v1 and HP-UX 11i v2 operating systems. The previous version of Kerberos Client, KRB5-Client, was released as part of the core HP-UX 11i v2 operating system.
The client libraries are based on MIT Kerberos V5 1.6.2 release. The KRB5-Client libraries support DES, 3DES, RC4, and AES, as specified in RFC 1510 of the IETF. This release of Kerberos Client is interoperable with Microsoft Windows ® 2000 and 2003. Table 1-2 lists and describes the utilities that Kerberos Client includes.
Table 1-3 Encryption Types supported by Kerberos Client D.1.6.2.04 (continued) Encryption Type Description des-hmac-sha1 DES with HMAC/sha1 arcfour-hmac ArcFour with HMAC/md5 rc4-hmac ArcFour with HMAC/md5 This encryption type is an alias to the arcfour-hmac encryption type. If you specify rc4-hmac in the configuration file, then it’s behavior is the same as arcfour-hmac. arcfour-hmac-md5 ArcFour with HMAC/md5 This encryption type is an alias to the arcfour-hmac encryption type.
• Support for TCP Kerberos Client libraries can now use TCP to connect to the Key Distribution Center (KDC). Libraries can use TCP to communicate with Microsoft KDCs (domain controllers) if they issue tickets with excess PAC data. • • Security fixes up to version 1.6.2 made by MIT in the open source version of Kerberos Client. Administrators can now control the behavior of Kerberized login applications that call the krb5_kuserok API provided by the libkrb5.sl library.
Installing Kerberos Client D.1.6.2.04 To install Kerberos Client D.1.6.2.04, complete the following steps: 1. 2. 3. 4. 5. Log in as superuser. Download the depot from the Software Depot at: http://h20293.www2.hp.com/. Fill out the registration form, and ensure that you select HP-UX 11i v2 as the operating system. Download the Kerberos Client Software Depot and move it to the /tmp directory. Verify if the file downloaded correctly by entering the following command: # swlist -d @ /tmp/
QXCR1000953090 Symptom: HP CIFS Server is not compatible with Kerberos Client version 1.6.2.01 on HP-UX 11i v2. Defect Description: HP CIFS Server is not compatible with Kerberos Client version 1.6.2.01 on HP-UX 11i v2. Resolution: This problem is fixed. HP CIFS Server is compatible with Kerberos Client version 1.6.2.04 on HP-UX 11i v2. Related Documentation For more information about Kerberos Client, see Configuration Guide for Kerberos Client Products on HP-UX (5991-7718), at: http://docs.hp.
