Introduction to the Kerberos Products and GSS-API

KRB5 Client Software

 

Table 2-6 lists and describes the Kerberos client libraries.

Table 2-6

Kerberos Client Libraries on HP-UX 11i v3

Architect-

ure

PA-RISC

32-bit

64-bit

Functionality

/usr/lib/libkrb5.sl

/usr/lib/pa20_64/

Authenticates users,

->/usr/lib/libkrb5.1

libkrb5.sl ->

verifies tickets,

 

/usr/lib/pa20_64/

creates

 

librb5.1

authenticator, and

 

 

manages the context

 

 

 

/usr/lib/

/usr/lib/pa20_64/

Prints appropriate

libcom_err.sl ->

libcom_err.sl ->

error messages to

/usr/lib/libcom_err.1

/usr/lib/pa20_64/

stderr, based on the

 

libcom_err.1

error code returned

 

 

by the Kerberos

 

 

APIs

 

 

 

/usr/lib/

/usr/lib/pa20_64/

Encrypts (using

libk5crypto.sl ->

libk5crypto.sl ->

DES, 3DES, AES,

/usr/lib/libk5crypto.1

/usr/lib/pa20_64/

and RC4

 

libk5crypto.1

cryptographic

 

 

algorithms) and

 

 

decrypts all

 

 

communication

 

 

between users to

 

 

ensure privacy and

 

 

data integrity

 

 

 

/usr/lib/gss/

/usr/lib/pa20_64/

Kerberos mechanism

libgssapi_krb5.sl ->

gss/

specific library used

/usr/lib/gss/libgssapi_

libgssapi_krb5.sl

by GSSAPI

krb5.1

->

(/usr/lib/libgss.

 

/usr/lib/pa20_64/

sl)

 

gss/libgssapi_krb

 

 

5.1

 

 

 

 

The Kerberos client software also provides the following header files:

•/usr/include/profile.h

•/usr/include/krb5.h

Chapter 2

55