Kerberos Server Version 3.1 Release Notes

HP Kerberos Server v3.1 Release Notes

Kerberos Server Version 3.1 Beneﬁts and Features

Chapter 18

• High Availability

This mechanism has been provided in this version of the Kerberos Server, by having the

parent process always monitor the server daemon. If the server daemon dies or crashes,

the parent process will automatically spawn a new server daemon.

• Dynamic Propagation

Automatically propagates incremental changes from the Primary server to the associated

Secondary servers, thus synchronizing both the Primary and the Secondary servers.

NOTE Propagation is disabled if you select LDAP as your backend database.

Check with your LDAP administrator, for more information about

propagation of information on the LDAP Server.

• 3DES Encryption

Provides 3DES encryption type for secret key technology. 3DES is a much stronger

encryption type than the 56 bit DES encryption algorithm. You can conﬁgure your server

to be either DES or 3DES.

NOTE DES, is still used as the default encryption key type, for backward

compatibility.

• Windows 2000 interoperability

Enables cross realm authentication with Windows 2000 servers, to allow you to work in a

mixed platform environment.

• Pre-threaded Concurrent Server

A pool of threads is available to simultaneously service multiple client requests in the key

distribution center, for enhanced system performance.

• C-Tree database

You can conﬁgure your Kerberos Server with a C-Tree database as the backend database.

This database uses B+ Tree algorithm.

• LDAP database

You can, optionally, conﬁgure your Kerberos Server with LDAP as the backend database.