Kerberos Server Version 3.1.2 Release Notes (5900-1856, July 2011)

Compatibility information and installation requirements
Installation requirements
Before you install the server, HP recommends that you:
• Ensure that you have the HP-UX 11i v2 operating system installed on your system. You can
check the version of the HP-UX operating system by using the uname -r command.
• Ensure that the Kerberos Server is installed on a system that is physically secure and has
restricted access to it. If necessary, ascertain that the system, on which you install the Kerberos
Server, is kept under lock and key.
• Disable all the network services, such as ftp, telnet, rlogin, finger, to restrict access
to the machine. You can do this, by modifying the /etc/inetd.conf file to deactivate
non-kerberized services. You must restart the inetd daemon after you make these changes.
• Ensure that the file system is protected with proper permissions in order to restrict the non-root
users from accessing and manipulating the Kerberos Server maintained files, such as cache
files and stash files.
• Ensure that the /opt/krb5/krb5_ldap.conf file is protected with proper permissions in
order to restrict the non-root users from accessing and manipulating this file.
Software requirements
Before installing the Kerberos Server product, ensure that the following software is installed on the
system:
• HP-UX 11i v2 Operating System - see HP-UX 11i Version 2 Installation and Update Guide
(5187-2725).
• LDAP-UX Client (J4269AA), if you have opted to configure your Kerberos server with LDAP
as the backend. See Installing and Administering LDAP-UX Client services (B.03.10) for more
information.
For more information about these products, see the related documentation section. If you cannot
find the software or information, contact your HP representative or see the website at
http://www.software.hp.com.
Hardware requirements
HP Integrity workstations or servers.
Disk space required to install
This product requires 12 Mbytes of disk space.
Install with system up or down
Install this product with the system up. The system does not need to be rebooted after the product
has been installed.
Installing the Kerberos Server
T1417AA contains two software products, namely
• KRB5-Server - Kerberos Server daemons Version 3.1.2
• KRB5-Srv-Admin - Kerberos Server administrative utilities Version 3.1.2
If you want to configure your system for remote administration, install only the KRB5-Srv-Admin
product from the T1417AA bundle. To install the Kerberos server, follow these steps:
1. Insert the software media disk in the appropriate drive
Compatibility information and installation requirements 9