Kerberos Client Version D.1.6.2.08 release notes (5900-0877), July 2010

Table 1-1 Kerberos Client Libraries on PA-RISC (PA) and Itanium (IA) Architecture (continued)
Functionality64-bit32-bitArchitecture
Authenticate
users, verify
tickets, create
authenticator,
and manage the
context.
/usr/lib/hpux64/libkrb5.so ->
/opt/krb5client/lib/hpux64/
libkrb5.so.1
/usr/lib/hpux32/libkrb5.so ->
/opt/krb5client/lib/hpux32/
libkrb5.so.1
Itanium
Print appropriate
error messages to
stderr based on
the error code
returned by the
Kerberos APIs.
/usr/lib/hpux64/libcom_err.so ->
/opt/krb5client/lib/hpux64/
libcom_err.so.1
/usr/lib/hpux32/libcom_err.so
-> /opt/krb5client/lib/hpux32/
libcom_err.so.1
Encrypt (DES,
3DES, AES, and
RC4) and
decrypt all
communication
between users to
ensure privacy
and data
integrity.
/usr/lib/hpux64/libk5crypto.so
->/opt/krb5client/lib/hpux64/
libk5crypto.so.1
/usr/lib/hpux32/
libk5crypto.so -> /opt/
krb5client/lib/hpux32/
libk5crypto.so.1
Kerberos-mechanism
specific library
used by GSSAPI
(/usr/lib/
libgss.sl)
/usr/lib/hpux64/gss/
libgssapi_krb5.so ->/opt/
krb5client/lib/hpux64/gss/
libgssapi_krb5.so.1
/usr/lib/hpux32/gss/
libgssapi_krb5.so-> /opt/
krb5client/lib/hpux32/gss/
libgssapi_krb5.so.1
The client libraries are based on MIT Kerberos V5 1.6.2 release. The KRB5-Client libraries support
DES, 3DES, RC4, and AES, as specified in RFC 1510 of the IETF. This release of Kerberos Client
is interoperable with Microsoft Windows ® 2000 and 2003.
Table 1-2 lists and describes the utilities that Kerberos Client includes.
Table 1-2 Kerberos Client utilities
FunctionUtility
Obtains and caches the Kerberos ticket-granting ticket
/usr/bin/kinit ->/opt/krb5client/bin/kinit
1
Lists cached Kerberos tickets
/usr/bin/klist -> /opt/krb5client/bin/klist
Prints key version numbers of Kerberos principals
/usr/bin/kvno -> /opt/krb5client/bin/kvno
Changes a user’s Kerberos password
/usr/bin/kpasswd -> /opt/krb5client/bin/
kpasswd
Maintains the Kerberos keytab file
/usr/sbin/ktutil -> /opt/krb5client/sbin/
ktutil
Destroys the user’s active Kerberos tickets
/usr/bin/kdestroy -> /opt/krb5client/bin/
kdestroy
1 The -> symbol indicates that the core file links to the corresponding file in the krb5client product.
Kerberos Client includes the following header files:
• /usr/include/profile.h -> /opt/krb5client/include/profile.h
• /usr/include/krb5.h -> /opt/krb5client/include/krb5.h
• /usr/include/com_err.h -> /opt/krb5client/include/com_err.h
• /usr/include/krb5/gssapi.h -> /opt/krb5client/include/krb5/gssapi.h
6 Kerberos Client D.1.6.2.08 release notes