Kerberos Server Version 3.2.2 Release Notes (5900-1855, July 2011)

• HP Kerberos Administrator
Use the Administrator to:
◦ Create and associate a principal with an LDAP DN
◦ Delete principals
NOTE: When a Kerberos principal is deleted only the associated Kerberos attributes are
deleted. The LDAP object is not deleted. The system administrator must manually delete this
LDAP object.
◦ Alter principal account settings
◦ Assign administrative permissions
◦ Modify the default group principals
◦ Extract principals to service key table files
◦ Reset password of principals
• IPv6
Starting with Kerberos Server v3.2.2 release, IPv6 addresses are supported. The Kerberos
Server now runs independent of IPv4, IPv6, or a dual stack node.
The Kerberos Server authenticates client requests received from IPv4 or IPv6 network.
All the Kerberos Server components such as, kadmind, kpropd, kdcd, kadmin, and
kadmin_ui work in the IPv6 environment similar to how they work in the IPv4 environment.
The Kerberos Server creates the ticket properly with IPv6 addresses.
The following daemons and utilities are updated to support IPv6 addresses:
• kdcd
• kadmind
• kpropd
• kadmin or kadmin_ui
The following libraries are updated to support IPv6 addresses:
• libk5.sl — core library that includes all core networking functions. It includes wrappers
written for standard networking functions, such as, gethostbyname, getservbyport,
gethostbyaddr, and getservbyname.
• libk5srv.sl — library that includes database accessing function for administration.
• libkadm.sl — library that implements parsing of kadmin request.
• libkpwd.sl — library that handles change passwd request.
• libkpropd.sl — library that handles incoming propagation data.
Table 1 lists the different versions of the Administrator and their locations.
Table 1 Versions of Administrator and their Locations
Absolute Path NameLocal or Remote?Administrator Name
/opt/krb5/admin/kadminl_uiLocal administrator available only on the primary server-
GUI based administrator
kadminl_ui
/opt/krb5/admin/kadminlLocal administrator available only on the primary server-
Command-line based administrator
kadminl
6 Announcement