PAM Kerberos v 1.26 Release Notes

Announcement
PAM Kerberos v1.26 is implemented under the Pluggable Authentication Module (PAM)
framework. It is based on the Kerberos Authentication System v5, developed by Massachusetts
Institute of Technology (MIT). The PAM Kerberos v 1.26 module is compliant with IETF RFC
1510 The Kerberos Network Authentication Service (V5) and Open Group RFC 86.0.
PAM Kerberos v1.26 supports HP-UX Kerberos Server version 3.12, Microsoft Windows® 2000
and Microsoft Windows 2003, and MIT Kerberos V5 Key Distribution Center (KDC).
NOTE: PAM Kerberos v1.26 does not support HP-UX Distributed Computing Environment
(DCE) KDC.
Overview
PAM Kerberos v1.26 is a shared library, which is implemented using the PAM service modules.
The following shared PAM Kerberos library files use the KRB5-Client APIs for authentication:
• The /usr/lib/security/libpam_krb5.1 and /usr/lib/security/pa20_64/
libpam_krb5.1 files on HP-UX 11i v1
• The /usr/lib/security/$ISA/libpam_krb5.so.1 file on HP-UX 11i v2 and HP-UX
11i v3
Features and Benefits
PAM Kerberos v 1.26 offers the following features and benefits:
• PAM Kerberos works in heterogeneous environments.
Using PAM Kerberos, the HP-UX login(1) can work with any Kerberos 5 Server and passwords
can be effectively unified with Microsoft Windows 2000.
• PAM Kerberos supports the password change protocol.
This feature automates the propagation of password changes.
Files and Filesets in PAM Kerberos v 1.26
PAM Kerberos v 1.26 contains the following files:
• The libpam_krb5.1 library on HP-UX 11i v1, the libpam_krb5.so.1 library on HP-UX
11i v2 and HP-UX 11i v3.
• The pamkrbval PAM Kerberos v1.26 configuration validation tool
• The sample /etc/pam.conf file
• The pam_krb5(5) manpage
• The pamkrbval(1m) manpage
Table 1-1 lists the file sets in PAM Kerberos on HP-UX 11i v1.
Table 1-1 PAM Kerberos v 1.26 File sets on HP-UX 11i v1
Library NameDescriptionFile Set Name
/usr/lib/security/pa20_64/libpam_krb5.1
PAM-Kerberos 64-bit
Shared Library
PAM-KRB-64SLIB
/etc/pam.krb5
PAM-Kerberos
Demonstration
PAM-KRB-DEMO
• /usr/share/man/man5.Z/pam_krb5.5
• /usr/share/man/man1m.z/pamkrbval.1m
PAM-Kerberos
Manpages
PAM-KRB-MAN
6 PAM Kerberos v1.26 Release Notes