Kerberos System Requirements

Reflection for Secure IT supports the following Kerberos implementations:

  • MIT Kerberos V5, release 1.5.4 or later
  • Oracle Solaris native Kerberos libraries

Reflection for Secure IT uses the following Kerberos libraries. You may need to configure the keywords shown here to specify the fully-qualified path to these libraries on your system. (The default values of these settings depend on your operating system.)

Library

Keyword

Used by

libgssapi_krb5.so

LibGssKrb5

Client (ssh2_config) and server (sshd2_config)

libkrb5.so

LibKrb5

Server only (sshd2_config)

 

GSSAPI authentication on AIX requires additional steps to extract shared Kerberos libraries.

To extract the Kerberos libraries on IBM AIX

  1. Change directories to the directory containing the static Kerberos libraries (usually /usr/lib).

    # cd /usr/lib

  2. Run the following command to extract the shared Kerberos library:

    # ar -v -x libkrb5.a

  3. Run the following command to extract the shared GSSAPI library:

    # ar -v -x libgssapi_krb5.a

Related Topics

Kerberos (GSSAPI) Authentication

Configure Kerberos Server and Client Authentication