Kerberos Client Version E.1.6.2.
© Copyright 2010, 2011 Hewlett-Packard Development Company, L.P Legal Notices Copyright 2010, 2012Hewlett-Packard Development Company, L.P. Confidential computer software. Valid license from HP required for possession, use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor's standard commercial license.
Contents 1 Kerberos Client E.1.6.2.10 release notes.........................................................4 Announcement.........................................................................................................................4 Encryption types supported by Kerberos Client.........................................................................7 What is new in this Version........................................................................................................
1 Kerberos Client E.1.6.2.10 release notes Information in this document applies to the Web release of Kerberos Client E.1.6.2.10 for HP-UX 11i v3. Announcement Kerberos Client (krb5client) is a Web upgrade for KRB5-Client. KRB5-Client is a part of the core HP-UX 11i v3 operating system. HP-UX provides Kerberos Client software including libraries, header files, and utilities for implementing secured client/server applications in either 32-bit or 64-bit development environments.
Table 1 Kerberos Client PA-RISC and Itanium Libraries (continued) Architecture Library Name / Location Functionality 64–bit • /usr/lib/pa20_64/gss/libgssapi_krb5.sl -> /usr/lib/pa20_64/gss/libgssapi_krb5.1 • /usr/lib/pa20_64/gss/libgssapi_krb5.1 -> /opt/krb5client/lib/pa20_64/gss/ libgssapi_krb5.1 32–bit • /usr/lib/libkrb5support.sl -> /opt/ krb5client/lib/libkrb5support.1 64–bit Ensures thread-safety for all the Kerberos libraries • /usr/lib/pa20_64/libkrb5support.
Table 1 Kerberos Client PA-RISC and Itanium Libraries (continued) Architecture Library Name / Location Functionality Itanium 32–bit Kerberos-mechanism specific library used by GSSAPI (/usr/ lib/libgss.sl) • /usr/lib/hpux32/libgss.so –> /usr/lib/ hpux32/libgss.so.1 • /usr/lib/hpux32/libgss.so.1 –> /opt/ krb5client/lib/hpux32/gss/ libgssapi_krb5.so.1 64–bit • /usr/lib/hpux64/libgss.so -> /usr/lib/ hpux64/libgss.so.1 • /usr/lib/hpux64/libgss.so.1 -> /opt/ krb5client/lib/hpux64/gss/ libgssapi_krb5.so.
Encryption types supported by Kerberos Client Table 3 lists the encryption types supported by Kerberos Client E.1.6.2.10. Table 3 Encryption types supported by Kerberos Client E.1.6.2.10 Encryption Type Description des-cbc-crc DES cbc mode with CRC-32 des-cbc-md4 DES cbc mode with RSA-MD4 des-cbc-md5 DES cbc mode with RSA-MD5 des DES cbc mode with RSA-MD5 This encryption type is an alias to the des-cbc-md5 encryption type.
Table 3 Encryption types supported by Kerberos Client E.1.6.2.10 (continued) Encryption Type Description This encryption type is an alias to the aes128-cts-hmac-sha1-96 encryption type. If you specify aes128-cts in the configuration file, then it’s behavior is the same as aes128-cts-hmac-sha1-96. aes256-cts-hmac-sha1-96 AES-256 CTS mode with 96-bit SHA-1 HMAC aes256-cts AES-256 CTS mode with 96-bit SHA-1 HMAC This encryption type is an alias to the aes256-cts-hmac-sha1-96 encryption type.
in the user’s home directory. If the/etc/krb5 directory does not exist krb5_kuserokcontinues to check the .k5login file in the user's home directory. If the/etc/ krb5/ directory exists, the krb5_kuserok API ignores any corresponding .k5login files in the user's home directory while making authorization decisions. The format of the entries in the new files in /etc/krb5 continues to be the same as that of the .k5login file in the user's home directory.
# Target: localhost:/tmp/KRB5CLIENT.depot # # # Bundle(s): # KRB5CLIENT E.1.6.2.10 Kerberos V5 Client Version 1.6.2.10 NOTE: When using the swlist and swinstall commands, you must specify the absolute path of the source depot. 6. On a standalone system, enter the following command to install the Kerberos Client software bundle: # swinstall -s /tmp/KRB5CLIENT.depot The swinstall window is displayed. 7. 8.
