Kerberos Client Version D.1.6.2.09 Release Notes (5990-1526, January 2011)

Table 1 Kerberos Client Libraries on PA-RISC (PA) and Itanium (IA) Architecture (continued)
Functionality64-bit32-bitArchitecture
Authenticate users, verify
tickets, create authenticator,
and manage the context.
/usr/lib/hpux64/
libkrb5.so -> /opt/
krb5client/lib/
hpux64/libkrb5.so.1
/usr/lib/hpux32/
libkrb5.so -> /opt/
krb5client/lib/
hpux32/libkrb5.so.1
Itanium
Print appropriate error
messages to stderr based on
the error code returned by
the Kerberos APIs.
/usr/lib/hpux64/
libcom_err.so -> /opt/
krb5client/lib/
hpux64/
libcom_err.so.1
/usr/lib/hpux32/
libcom_err.so -> /opt/
krb5client/lib/
hpux32/
libcom_err.so.1
Encrypt (DES, 3DES, AES,
and RC4) and decrypt all
communication between
users to ensure privacy and
data integrity.
/usr/lib/hpux64/
libk5crypto.so ->/opt/
krb5client/lib/
hpux64/
libk5crypto.so.1
/usr/lib/hpux32/
libk5crypto.so-> /opt/
krb5client/lib/
hpux32/
libk5crypto.so.1
Kerberos-mechanism specific
library used by GSSAPI
(/usr/lib/libgss.sl)
/usr/lib/hpux64/gss/
libgssapi_krb5.so
->/opt/krb5client/
lib/hpux64/gss/
libgssapi_krb5.so.1
/usr/lib/hpux32/gss/
libgssapi_krb5.so
->1/opt/krb5client/
lib/hpux32/gss/
libgssapi_krb5.so.
The client libraries are based on MIT Kerberos V5 1.6.2 release. The KRB5-Client libraries support
DES, 3DES, RC4, and AES, as specified in RFC 1510 of the IETF. This release of Kerberos Client
is interoperable with Microsoft Windows ® 2000 and 2003.
Table 2 lists and describes the utilities that Kerberos Client includes.
Table 2 Kerberos Client utilities
FunctionUtility
Obtains and caches the Kerberos ticket-granting ticket/usr/bin/kinit ->/opt/krb5client/bin/kinit
1
Lists cached Kerberos tickets/usr/bin/klist -> /opt/krb5client/bin/klist
Prints key version numbers of Kerberos principals/usr/bin/kvno -> /opt/krb5client/bin/kvno
Changes a user’s Kerberos password/usr/bin/kpasswd -> /opt/krb5client/bin/
kpasswd
Maintains the Kerberos keytab file/usr/sbin/ktutil -> /opt/krb5client/sbin/
ktutil
Destroys the user’s active Kerberos tickets/usr/bin/kdestroy -> /opt/krb5client/bin/
kdestroy
1 The -> symbol indicates that the core file links to the corresponding file in the krb5client product.
Kerberos Client includes the following header files:
• /usr/include/profile.h -> /opt/krb5client/include/profile.h
• /usr/include/krb5.h -> /opt/krb5client/include/krb5.h
• /usr/include/com_err.h -> /opt/krb5client/include/com_err.h
• /usr/include/krb5/gssapi.h -> /opt/krb5client/include/krb5/gssapi.h
Encryption types supported by Kerberos Client
Table 3 lists the encryption types supported by Kerberos Client D.1.6.2.09.
Announcement 5