Kerberos Server Version 3.2.2 Release Notes (5900-1855, July 2011)

1 Announcement
HP Kerberos Server v3.2.2 is based on the client-server architecture. It ensures secure communication
in a networked environment by leveraging individual trust relationships. It then brokers this trust
across enterprise-wide distributed client-server networks.
The communication between client and server is secured using the Kerberos protocol. HP Kerberos
Server allows entities to authenticate themselves, without having to transmit their passwords in clear
text form, over the network.
You can obtain HP Kerberos Server v3.2.2 from the HP Software Depot at: http://
www.software.hp.com
HP Kerberos Server v 3.2.2 cannot be ordered from HP by the individual product number.
What's in this version
Starting with the Kerberos Server v3.2.2 release, IPv6 addresses are supported. Internet Services
protocols are now compliant with Kerberos Server in an IPv6 environment.
Supported encryption types
Following are the encryption types supported by Kerberos Server:
• DES cbc mode with CRC-32 - des-cbc-crc
• DES cbc mode with RSA-MD5 - des-cbc-md5
• DES cbc mode raw - des-cbc-raw
• Triple DES cbc mode with RSA-MD5 - des3-cbc-md5
• Triple DES cbc mode raw - des3-cbc-raw
• Triple DES cbc mode with HMAC/sha1 - des3-cbc-sha1
NOTE: The 3DES encryption types supported by Kerberos Server are not compatible with the
MIT 3DES implementation.
Kerberos Server version 3.2.2 benefits and features
The Kerberos Server is primarily a centralized network authentication system providing security
solutions to geographically dispersed organizations. Following are the key features of Kerberos
Server v3.2.2:
• Strong Authentication
Using the Kerberos Server, you can be assured that users, who logon to your network are
who they claim to be, to access the services, databases and applications on your client-server
network.
Strong authentication is the backbone of Kerberos Server. With geographically dispersed
organizations and resources disbursed across multiple platforms, the need for users to access
multiple secure systems in a secure manner is greater than ever. HP Kerberos Server v3.2.2,
provides the unique ability to broker authentication between one secure system and another.
The server provides the base for strong authentication.
In order to use the Kerberos Server network, each user and service, referred to as a principal,
in the network must prove its identity, referred to as authentication. This means that each
principal must be able to, on demand, provide authentication information that only the principal
4 Announcement