KRB5-Client.KRB5-SHLIB

[Haijun Cao_1]

Does anybody know if KRB5-Client.KRB5-SHLIB is part of core os for HPUX11.0 or HPUX11i?

If it does not come by default with hp os, where can I get it?

Thanks

[Michael Tully]

It is part of the HPUXBase64 filesets. It is loaded as part of the initial OS install. I cannot say for certain on HPUX 11, but certainly for 11i.

[Kurt Renner]

Patches are likely necessary to enable it properly.

I have worked with HP on Kerberos on HP-UX 11.00 and 11.11 quite a bit in the last year. We want to provide single sign-on in our SAP environment. We have not yet implemented it in our production environmnent, but have in test, and are poised to do so in production when the rest of the business is ready for it. I recently asked the tech I have been working with at HP for a current list of the patches required to enable Kerberos/SSO. Note there are site-specific patches for libsis (which means you have to contact HP to get them). Following is the latest information I received on patches required for Kerberos on HP-UX:

---------------------------------------------

As far as the current patch level, I can only speak to Kerberos. As a general rule, its best to apply the patches that are on the current quality pack, which comes out every quarter along with the application CDs. Install the patches with -xpatch_match_target=true option, so you will be installing only patches against what's already installed on your system.

The kerberos patches are:

11.11 PHSS_28940 KRB5-Client V 1.0
PHSS_26872 libsis Site-specific patch to read the appsdefaults section of /etc/krb5.conf
11.00 PHSS_24834 " "

I have not seen any ETA of when the site-specific patch will be released.

Use the current quality pack version of patches for ftpd, r-commands, telnetd.
Searching Sep03/11.00/QPK
PHNE_23003 1.0 r-commands cumulative mega-patch
PHNE_23949 1.0 ftpd(1M) and ftp(1) patch
PHNE_25355 1.0 tftp(1) and tftpd(1M) patch
PHNE_26096 1.0 telnet kernel and telnetd(1M) patch

Searching Sep03/11.11/GoldQPK
PHNE_24829 1.0 telnet kernel, telnetd(1M), telnet(1) patch
PHNE_27765 1.0 ftpd(1M) patch
PHNE_27777 1.0 r-commands cumulative mega-patch


The beta fix for SAP that you have been testing, will be GR0 patch PHSS_29486 KRB5-Client v 1.0. This patch should be available soon (Dec).
---------------------------------------------

Good luck!