155682Smarkm\input texinfo @c -*- texinfo -*- 255682Smarkm@c %**start of header 3178825Sdfr@c $Id: heimdal.texi 22191 2007-12-06 17:26:30Z lha $ 455682Smarkm@setfilename heimdal.info 555682Smarkm@settitle HEIMDAL 655682Smarkm@iftex 755682Smarkm@afourpaper 855682Smarkm@end iftex 955682Smarkm@c some sensible characters, please? 1055682Smarkm@tex 1155682Smarkm\input latin1.tex 1255682Smarkm@end tex 1355682Smarkm@setchapternewpage on 1455682Smarkm@syncodeindex pg cp 1555682Smarkm@c %**end of header 1655682Smarkm 17178825Sdfr@include vars.texi 1855682Smarkm 19178825Sdfr@set UPDATED $Date: 2007-12-06 09:26:30 -0800 (Tor, 06 Dec 2007) $ 20178825Sdfr@set VERSION @value{PACKAGE_VERSION} 21178825Sdfr@set EDITION 1.0 22178825Sdfr 2355682Smarkm@ifinfo 24178825Sdfr@dircategory Security 2555682Smarkm@direntry 2655682Smarkm* Heimdal: (heimdal). The Kerberos 5 distribution from KTH 2755682Smarkm@end direntry 2855682Smarkm@end ifinfo 2955682Smarkm 3055682Smarkm@c title page 3155682Smarkm@titlepage 3255682Smarkm@title Heimdal 3355682Smarkm@subtitle Kerberos 5 from KTH 3455682Smarkm@subtitle Edition @value{EDITION}, for version @value{VERSION} 35178825Sdfr@subtitle 2007 3655682Smarkm@author Johan Danielsson 37178825Sdfr@author Love H�rnquist �strand 3855682Smarkm@author Assar Westerlund 3955682Smarkm@author last updated @value{UPDATED} 4055682Smarkm 4155682Smarkm@def@copynext{@vskip 20pt plus 1fil@penalty-1000} 4255682Smarkm@def@copyrightstart{} 4355682Smarkm@def@copyrightend{} 4455682Smarkm@page 4555682Smarkm@copyrightstart 46178825SdfrCopyright (c) 1997-2007 Kungliga Tekniska H�gskolan 4755682Smarkm(Royal Institute of Technology, Stockholm, Sweden). 4855682SmarkmAll rights reserved. 4955682Smarkm 5055682SmarkmRedistribution and use in source and binary forms, with or without 5155682Smarkmmodification, are permitted provided that the following conditions 5255682Smarkmare met: 5355682Smarkm 5455682Smarkm1. Redistributions of source code must retain the above copyright 5555682Smarkm notice, this list of conditions and the following disclaimer. 5655682Smarkm 5755682Smarkm2. Redistributions in binary form must reproduce the above copyright 5855682Smarkm notice, this list of conditions and the following disclaimer in the 5955682Smarkm documentation and/or other materials provided with the distribution. 6055682Smarkm 6155682Smarkm3. Neither the name of the Institute nor the names of its contributors 6255682Smarkm may be used to endorse or promote products derived from this software 6355682Smarkm without specific prior written permission. 6455682Smarkm 6555682SmarkmTHIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND 6655682SmarkmANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 6755682SmarkmIMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 6855682SmarkmARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE 6955682SmarkmFOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 7055682SmarkmDAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 7155682SmarkmOR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 7255682SmarkmHOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 7355682SmarkmLIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 7455682SmarkmOUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 7555682SmarkmSUCH DAMAGE. 7655682Smarkm 7755682Smarkm@copynext 7855682Smarkm 7955682SmarkmCopyright (C) 1990 by the Massachusetts Institute of Technology 8055682Smarkm 8155682SmarkmExport of this software from the United States of America may 8255682Smarkmrequire a specific license from the United States Government. 8355682SmarkmIt is the responsibility of any person or organization contemplating 8455682Smarkmexport to obtain such a license before exporting. 8555682Smarkm 8655682SmarkmWITHIN THAT CONSTRAINT, permission to use, copy, modify, and 8755682Smarkmdistribute this software and its documentation for any purpose and 8855682Smarkmwithout fee is hereby granted, provided that the above copyright 8955682Smarkmnotice appear in all copies and that both that copyright notice and 9055682Smarkmthis permission notice appear in supporting documentation, and that 9155682Smarkmthe name of M.I.T. not be used in advertising or publicity pertaining 9255682Smarkmto distribution of the software without specific, written prior 9355682Smarkmpermission. M.I.T. makes no representations about the suitability of 9455682Smarkmthis software for any purpose. It is provided "as is" without express 9555682Smarkmor implied warranty. 9655682Smarkm 9755682Smarkm@copynext 9855682Smarkm 9955682SmarkmCopyright (c) 1988, 1990, 1993 10055682Smarkm The Regents of the University of California. All rights reserved. 10155682Smarkm 10255682SmarkmRedistribution and use in source and binary forms, with or without 10355682Smarkmmodification, are permitted provided that the following conditions 10455682Smarkmare met: 10555682Smarkm 10655682Smarkm1. Redistributions of source code must retain the above copyright 10755682Smarkm notice, this list of conditions and the following disclaimer. 10855682Smarkm 10955682Smarkm2. Redistributions in binary form must reproduce the above copyright 11055682Smarkm notice, this list of conditions and the following disclaimer in the 11155682Smarkm documentation and/or other materials provided with the distribution. 11255682Smarkm 113178825Sdfr3. Neither the name of the University nor the names of its contributors 11455682Smarkm may be used to endorse or promote products derived from this software 11555682Smarkm without specific prior written permission. 11655682Smarkm 11755682SmarkmTHIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND 11855682SmarkmANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 11955682SmarkmIMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 12055682SmarkmARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 12155682SmarkmFOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 12255682SmarkmDAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 12355682SmarkmOR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 12455682SmarkmHOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 12555682SmarkmLIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 12655682SmarkmOUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 12755682SmarkmSUCH DAMAGE. 12855682Smarkm 12955682Smarkm@copynext 13055682Smarkm 13155682SmarkmCopyright 1992 Simmule Turner and Rich Salz. All rights reserved. 13255682Smarkm 13355682SmarkmThis software is not subject to any license of the American Telephone 13455682Smarkmand Telegraph Company or of the Regents of the University of California. 13555682Smarkm 13655682SmarkmPermission is granted to anyone to use this software for any purpose on 13755682Smarkmany computer system, and to alter it and redistribute it freely, subject 13855682Smarkmto the following restrictions: 13955682Smarkm 14055682Smarkm1. The authors are not responsible for the consequences of use of this 14155682Smarkm software, no matter how awful, even if they arise from flaws in it. 14255682Smarkm 14355682Smarkm2. The origin of this software must not be misrepresented, either by 14455682Smarkm explicit claim or by omission. Since few users ever read sources, 14555682Smarkm credits must appear in the documentation. 14655682Smarkm 14755682Smarkm3. Altered versions must be plainly marked as such, and must not be 14855682Smarkm misrepresented as being the original software. Since few users 14955682Smarkm ever read sources, credits must appear in the documentation. 15055682Smarkm 15155682Smarkm4. This notice may not be removed or altered. 15255682Smarkm 153178825Sdfr@copynext 154178825Sdfr 155178825SdfrIMath is Copyright 2002-2005 Michael J. Fromberger 156178825SdfrYou may use it subject to the following Licensing Terms: 157178825Sdfr 158178825SdfrPermission is hereby granted, free of charge, to any person obtaining 159178825Sdfra copy of this software and associated documentation files (the 160178825Sdfr"Software"), to deal in the Software without restriction, including 161178825Sdfrwithout limitation the rights to use, copy, modify, merge, publish, 162178825Sdfrdistribute, sublicense, and/or sell copies of the Software, and to 163178825Sdfrpermit persons to whom the Software is furnished to do so, subject to 164178825Sdfrthe following conditions: 165178825Sdfr 166178825SdfrThe above copyright notice and this permission notice shall be 167178825Sdfrincluded in all copies or substantial portions of the Software. 168178825Sdfr 169178825SdfrTHE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, 170178825SdfrEXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF 171178825SdfrMERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. 172178825SdfrIN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY 173178825SdfrCLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, 174178825SdfrTORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE 175178825SdfrSOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. 176178825Sdfr 177178825Sdfr@copynext 178178825Sdfr 179178825SdfrCopyright (c) 2005 Doug Rabson 180178825SdfrAll rights reserved. 181178825Sdfr 182178825SdfrRedistribution and use in source and binary forms, with or without 183178825Sdfrmodification, are permitted provided that the following conditions 184178825Sdfrare met: 185178825Sdfr1. Redistributions of source code must retain the above copyright 186178825Sdfr notice, this list of conditions and the following disclaimer. 187178825Sdfr2. Redistributions in binary form must reproduce the above copyright 188178825Sdfr notice, this list of conditions and the following disclaimer in the 189178825Sdfr documentation and/or other materials provided with the distribution. 190178825Sdfr 191178825SdfrTHIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 192178825SdfrANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 193178825SdfrIMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 194178825SdfrARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 195178825SdfrFOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 196178825SdfrDAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 197178825SdfrOR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 198178825SdfrHOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 199178825SdfrLIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 200178825SdfrOUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 201178825SdfrSUCH DAMAGE. 202178825Sdfr 203178825Sdfr@copynext 204178825Sdfr 205178825SdfrCopyright (c) 2005 Marko Kreen 206178825SdfrAll rights reserved. 207178825Sdfr 208178825SdfrRedistribution and use in source and binary forms, with or without 209178825Sdfrmodification, are permitted provided that the following conditions 210178825Sdfrare met: 211178825Sdfr1. Redistributions of source code must retain the above copyright 212178825Sdfr notice, this list of conditions and the following disclaimer. 213178825Sdfr2. Redistributions in binary form must reproduce the above copyright 214178825Sdfr notice, this list of conditions and the following disclaimer in the 215178825Sdfr documentation and/or other materials provided with the distribution. 216178825Sdfr 217178825SdfrTHIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 218178825SdfrANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 219178825SdfrIMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 220178825SdfrARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 221178825SdfrFOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 222178825SdfrDAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 223178825SdfrOR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 224178825SdfrHOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 225178825SdfrLIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 226178825SdfrOUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 227178825SdfrSUCH DAMAGE. 228178825Sdfr 229178825Sdfr@copynext 230178825Sdfr 231178825SdfrCopyright (c) 2006,2007 232178825SdfrNTT (Nippon Telegraph and Telephone Corporation) . All rights reserved. 233178825Sdfr 234178825SdfrRedistribution and use in source and binary forms, with or without 235178825Sdfrmodification, are permitted provided that the following conditions 236178825Sdfrare met: 237178825Sdfr1. Redistributions of source code must retain the above copyright 238178825Sdfr notice, this list of conditions and the following disclaimer as 239178825Sdfr the first lines of this file unmodified. 240178825Sdfr2. Redistributions in binary form must reproduce the above copyright 241178825Sdfr notice, this list of conditions and the following disclaimer in the 242178825Sdfr documentation and/or other materials provided with the distribution. 243178825Sdfr 244178825SdfrTHIS SOFTWARE IS PROVIDED BY NTT ``AS IS'' AND ANY EXPRESS OR 245178825SdfrIMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES 246178825SdfrOF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. 247178825SdfrIN NO EVENT SHALL NTT BE LIABLE FOR ANY DIRECT, INDIRECT, 248178825SdfrINCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 249178825SdfrNOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 250178825SdfrDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 251178825SdfrTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 252178825Sdfr(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 253178825SdfrTHIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 254178825Sdfr 25555682Smarkm@copyrightend 25655682Smarkm@end titlepage 25755682Smarkm 258178825Sdfr@macro manpage{man, section} 259178825Sdfr@cite{\man\(\section\)} 260178825Sdfr@end macro 261178825Sdfr 26255682Smarkm@c Less filling! Tastes great! 26355682Smarkm@iftex 26455682Smarkm@parindent=0pt 26555682Smarkm@global@parskip 6pt plus 1pt 26655682Smarkm@global@chapheadingskip = 15pt plus 4pt minus 2pt 26755682Smarkm@global@secheadingskip = 12pt plus 3pt minus 2pt 26855682Smarkm@global@subsecheadingskip = 9pt plus 2pt minus 2pt 26955682Smarkm@end iftex 27055682Smarkm@ifinfo 27155682Smarkm@paragraphindent 0 27255682Smarkm@end ifinfo 27355682Smarkm 274178825Sdfr@ifnottex 27555682Smarkm@node Top, Introduction, (dir), (dir) 27655682Smarkm@top Heimdal 277178825Sdfr@end ifnottex 27855682Smarkm 279178825SdfrThis manual is last updated @value{UPDATED} for version 280178825Sdfr@value{VERSION} of Heimdal. 281178825Sdfr 28255682Smarkm@menu 28355682Smarkm* Introduction:: 28455682Smarkm* What is Kerberos?:: 28555682Smarkm* Building and Installing:: 28655682Smarkm* Setting up a realm:: 287178825Sdfr* Applications:: 28855682Smarkm* Things in search for a better place:: 28955682Smarkm* Kerberos 4 issues:: 290178825Sdfr* Windows 2000 compatability:: 291178825Sdfr* Programming with Kerberos:: 292178825Sdfr* Migration:: 29355682Smarkm* Acknowledgments:: 29455682Smarkm 295178825Sdfr@detailmenu 296178825Sdfr --- The Detailed Node Listing --- 297178825Sdfr 298178825SdfrSetting up a realm 299178825Sdfr 300178825Sdfr* Configuration file:: 301178825Sdfr* Creating the database:: 302178825Sdfr* Modifying the database:: 303178825Sdfr* keytabs:: 304178825Sdfr* Serving Kerberos 4/524/kaserver:: 305178825Sdfr* Remote administration:: 306178825Sdfr* Password changing:: 307178825Sdfr* Testing clients and servers:: 308178825Sdfr* Slave Servers:: 309178825Sdfr* Incremental propagation:: 310178825Sdfr* Encryption types and salting:: 311178825Sdfr* Cross realm:: 312178825Sdfr* Transit policy:: 313178825Sdfr* Setting up DNS:: 314178825Sdfr* Using LDAP to store the database:: 315178825Sdfr* Providing Kerberos credentials to servers and programs:: 316178825Sdfr* Setting up PK-INIT:: 317178825Sdfr 318178825SdfrApplications 319178825Sdfr 320178825Sdfr* Authentication modules:: 321178825Sdfr* AFS:: 322178825Sdfr 323178825SdfrAuthentication modules 324178825Sdfr 325178825Sdfr* Digital SIA:: 326178825Sdfr* IRIX:: 327178825Sdfr 328178825SdfrKerberos 4 issues 329178825Sdfr 330178825Sdfr* Principal conversion issues:: 331178825Sdfr* Converting a version 4 database:: 332178825Sdfr* kaserver:: 333178825Sdfr 334178825SdfrWindows 2000 compatability 335178825Sdfr 336178825Sdfr* Configuring Windows 2000 to use a Heimdal KDC:: 337178825Sdfr* Inter-Realm keys (trust) between Windows 2000 and a Heimdal KDC:: 338178825Sdfr* Create account mappings:: 339178825Sdfr* Encryption types:: 340178825Sdfr* Authorisation data:: 341178825Sdfr* Quirks of Windows 2000 KDC:: 342178825Sdfr* Useful links when reading about the Windows 2000:: 343178825Sdfr 344178825SdfrProgramming with Kerberos 345178825Sdfr 346178825Sdfr* Kerberos 5 API Overview:: 347178825Sdfr* Walkthrough of a sample Kerberos 5 client:: 348178825Sdfr* Validating a password in a server application:: 349178825Sdfr* API differences to MIT Kerberos:: 350178825Sdfr* File formats:: 351178825Sdfr 352178825Sdfr@end detailmenu 35355682Smarkm@end menu 35455682Smarkm 35555682Smarkm@include intro.texi 35655682Smarkm@include whatis.texi 35755682Smarkm@include install.texi 35855682Smarkm@include setup.texi 359178825Sdfr@include apps.texi 36055682Smarkm@include misc.texi 36155682Smarkm@include kerberos4.texi 36278527Sassar@include win2k.texi 36378527Sassar@include programming.texi 36472445Sassar@include migration.texi 36555682Smarkm@include ack.texi 36655682Smarkm 36755682Smarkm@c @shortcontents 36855682Smarkm@contents 36955682Smarkm 37055682Smarkm@bye 371