HP CIFS Server 3.0g Release Notes version A.02.03.01

Without these patches installed, you cannot change a user password using the HP-UX command

passwd when the winbind entry is configured in /etc/nsswitch.conf.

Kerberos Product and Patch Requirements

Kerberos v5 Client with version 1.3.5 or later is required to support HP CIFS Server integration

with a Windows 2003 ADS Domain Controller (DC). Kerberos Client version 1.0 was originally

bundled on HP-UX 11i v1 and v2. Kerberos Client version 1.3.5.03 is bundled on HP-UX 11i v3.

The following lists HP-UX Kerberos Client software dependencies on HP-UX 11i v1 and v2:

• Kerberos Client version 1.3.5 or later is required for keytab file support.

• Kerberos Client version 1.3.5 or later is required for the encryption type RC4-HMAC support.

• Kerberos Client version 1.3.5.03 requires Service Pack 1 on Windows 2003.

You can download the Kerberos v5 Client (KRB5CLIENT) product from the following Software

Depot web site:

http://www.hp.com/go/softwaredepot

Enter KRB5CLIENT in the search field.

HP-UX Patch Requirements

For HP-UX 11i v1, the Kerberos v5 Client product requires that you install the patches listed in

Table 2.

For HP-UX 11i v2, you must install the patch listed in Table 3.

For HP-UX 11i v3, you do not need any required patches.

You can download patches from the IT Resource Center (ITRC) patch and firmware database

available at:

http://itrc.hp.com

Table 2 Required Patches on HP-UX 11i v1 for Kerberos v5 Client

DescriptionPatch Number

libc cumulative patch.PHCO_24400

libc cumulative header file patch.PHCO_24402

libnsss_dns DNS backend patch.PHNE_27796

GSS-API version 1.0 cumulative patch.PHSS_29487

KRB5-Client version 1.0 cumulative patch.PHSS_33384

Table 3 Required Patch on HP-UX 11i v2 for Kerberos v5 Client

DescriptionPatch Number

KRB5-Client version 1.0 cumulative patch.PHSS_33389