Automic VaultAutomic Vault

brew

krb5 mit Homebrew, apk, Nix, pacman, zypper, apt, dnf installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für krb5 in AI-Agent-Workflows.

InstallationsbefehlSicherheitshinweise

Installation

Weitere Installationsbefehle

macOS

Homebrewverifiziert · 100%
brew install krb5

local Homebrew formula metadata

Linux

Alpine Linux apkverifiziert · 92%
sudo apk add krb5

Alpine Linux edge package indexes · krb5 · Quelle: dl-cdn.alpinelinux.org

Nixverifiziert · 92%
nix profile install nixpkgs#krb5

nixpkgs package indexes · pkgs/by-name/kr/krb5/package.nix · Quelle: api.github.com

Arch Linux pacmanverifiziert · 92%
sudo pacman -S krb5

Arch Linux sync databases · krb5 · Quelle: geo.mirror.pkgbuild.com

openSUSE zypperverifiziert · 92%
sudo zypper install krb5

openSUSE Tumbleweed package metadata · krb5 · Quelle: download.opensuse.org

Debian aptverifiziert · 92%
sudo apt install krb5-admin-server

Debian stable package indexes · krb5-admin-server · Quelle: deb.debian.org

Fedora dnfverifiziert · 92%
sudo dnf install krb5-devel

Fedora Rawhide package metadata · krb5-devel · Quelle: dl.fedoraproject.org

Überblick

Paketzusammenfassung

Network authentication protocol

Befehle und Aliase

  • compile_et
  • gss-client
  • gss-server
  • k5srvutil
  • kadmin
  • kadmin.local
  • kadmind
  • kdb5_util
  • kdestroy
  • kinit
  • klist
  • kpasswd
  • kprop
  • kpropd
  • kproplog
  • krb5-config
  • krb5-send-pr
  • krb5kdc
  • ksu
  • kswitch
  • ktutil
  • kvno
  • sclient
  • sim_client
  • sim_server
  • sserver
  • uuclient
  • uuserver

Verlauf

Projektgeschichte und Nutzung

MIT Kerberos is the reference implementation of the Kerberos network authentication protocol. Among packages in this batch, krb5 has the deepest systems history: it is both a protocol suite and a user/admin toolchain whose commands, libraries, config files, credential caches, and keytabs became standard Unix security plumbing.

Projektgeschichte

Kerberos was designed and implemented at MIT's Project Athena to solve open-network authentication problems for distributed workstations and services. MIT's overview describes it as a network authentication protocol using secret-key cryptography so clients and servers can prove identities over insecure networks.

The historical MIT dialogue about Kerberos was originally written in February 1988 and later updated with a Kerberos V5 afterword. Kerberos V5 was standardized by RFC 1510 and then clarified and superseded by RFC 4120 in July 2005.

MIT continues to publish krb5 source releases, documentation, user tools, administrator tools, GSS-API support, protocol documentation, and release notes. The public GitHub repository is described as a mirror of the MIT krb5 repository, while MIT's own web pages remain the authoritative release and documentation surface.

Adoptionsgeschichte

Kerberos spread from MIT academic infrastructure into Unix, enterprise, and vendor authentication systems because it provided single sign-on semantics without sending reusable passwords to each service. MIT's site states that Kerberos is available in many commercial products as well as free source form.

Package-manager adoption is unusually broad because krb5 is not just an end-user utility: development headers, client commands such as kinit and klist, KDC/admin daemons, GSS-API libraries, keytab utilities, and service integrations all depend on it.

Wie es verwendet wird

The CLI workflow centers on acquiring tickets with kinit, inspecting credential caches with klist, destroying tickets with kdestroy, changing passwords with kpasswd, and administering principals and keytabs with kadmin and ktutil. System operation uses /etc/krb5.conf for realm and library configuration, credential caches such as /tmp/krb5cc_%{uid}, and keytabs such as /etc/krb5.keytab.

For package maintainers, krb5 is a security-sensitive dependency that touches command-line tools, libraries, daemons, PAM or GSS-API consumers, protocol compatibility, encryption-type deprecations, and CVE-driven patch releases.

Warum Paket-Nerds sich dafür interessieren

krb5 is the kind of package that reveals the difference between an executable and an infrastructure component. Installing it may provide dozens of commands, shared libraries, config-file semantics, daemon behavior, protocol wire compatibility, and ABI/API commitments used by unrelated packages.

It is also a long-lived example of protocol packaging: the package has to track IETF standards, MIT release engineering, vendor interoperability, and security defaults such as DES, Triple-DES, RC4, PKINIT, PAC, and GSS-API changes over decades.

Zeitleiste

  • 1988: Bill Bryant wrote MIT's Kerberos design dialogue, reflecting the Project Athena authentication model.
  • 1996: MIT krb5 1.0-era releases entered the historical release archive.
  • 2005-07: RFC 4120 specified Kerberos V5 and obsoleted RFC 1510.
  • 2012-05-12: The public GitHub mirror repository was created.
  • 2026-01-29: MIT released krb5-1.22.2.

Related projects

  • Related standards and APIs include RFC 4120 Kerberos V5 and GSS-API integrations. Related implementations and deployments include vendor Kerberos products and operating-system authentication stacks that consume MIT krb5 libraries or interoperate with the protocol.

Sicherheitslage

Risikostufe: blue

broad file, network, media, or database tool signal.

Risikoklassifikator

blue Risiko · mittel Konfidenz · tool

Warum

  • broad file, network, media, or database tool signal

Signale

  • text:network,client,server

Installationsverhalten

  • In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
  • Homebrew-Bottle-Metadaten sind für 6 Plattformziele verfügbar.
  • Installiert mit 1 Laufzeitabhängigkeiten.

Empfohlene Prüfung

Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
/etc/krb5.conf

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix
/tmp/krb5cc_%{uid}/etc/krb5.keytab

Executables

Installierte Executables

BefehlArtSichtbarkeitHinweis
compile_etcliglobales Executable
gss-clientcliglobales Executable
gss-servercliglobales Executable
k5srvutilcliglobales Executable
kadmincliglobales Executable
kadmin.localcliglobales Executable
kadmindcliglobales Executable
kdb5_utilcliglobales Executable
kdestroycliglobales Executable
kinitcliglobales Executable
klistcliglobales Executable
kpasswdcliglobales Executable
kpropcliglobales Executable
kpropdcliglobales Executable
kproplogcliglobales Executable
krb5-configcliglobales Executable
krb5-send-prcliglobales Executable
krb5kdccliglobales Executable
ksucliglobales Executable
kswitchcliglobales Executable
ktutilcliglobales Executable
kvnocliglobales Executable
sclientcliglobales Executable
sim_clientcliglobales Executable
sim_servercliglobales Executable
sservercliglobales Executable
uuclientcliglobales Executable
uuservercliglobales Executable

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-07-10
Manager-Version1.22.2
Manager aktualisiert2026-05-14
lokale DatenOK
Upstreamnot checked
neueste erkannte Versionnicht erkannt

https://web.mit.edu/kerberos/

Installationsmetadaten

Paketmetadaten

Paketschlüsselbrew:krb5
Version1.22.2
PaketmanagerHomebrew
Paketmanager-Seitehttps://formulae.brew.sh/formula/krb5
Homepagehttps://web.mit.edu/kerberos/
Repositoryhttps://github.com/krb5/krb5
Upstream-Dokumentationhttps://web.mit.edu/kerberos/krb5-latest/doc
LizenzBSD-2-Clause AND BSD-2-Clause-first-lines AND BSD-3-Clause AND BSD-4-Clause AND Brian-Gladman-2-Clause AND CMU-Mach-nodoc AND FSFULLRWD AND HPND AND HPND-export2-US AND HPND-export-US AND HPND-export-US-acknowledgement AND HPND-export-US-modify AND ISC AND MIT AND MIT-CMU AND OLDAP-2.8 AND OpenVision AND (BSD-2-Clause OR GPL-2.0-or-later)
Quellarchivhttps://kerberos.org/dist/krb5/1.22/krb5-1.22.2.tar.gz
Zuletzt aktualisiert2026-05-14T09:32:34-04:00
Pulseupdated
Abhängigkeitenopenssl@3
Bottleverfügbar (auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnicht definiert
Dienstkeiner deklariert

Registry-Fakten

Details aus der Quelldatenbank

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namekrb5
Version Scheme0
Revision0
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyyes
URL Keys
  • stable

Source-Datenbank-Treffer

Andere Paketmanager-Einträge

Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.

Debian apt95%

krb5-admin-server 1.21.3-5

MIT Kerberos master server (kadmind)

https://web.mit.edu/kerberos/

sudo apt install krb5-admin-server
  • Section: net
  • Architecture: amd64
  • Source Package: krb5
  • 14 Abhängigkeiten
  • normalized package name match
  • Abgeglichen nach: Krb5
Debian stable package indexes · deb.debian.org · Debian stable package indexes: krb5-admin-server from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

krb5-doc 1.21.3-5

documentation for MIT Kerberos

https://web.mit.edu/kerberos/

sudo apt install krb5-doc
  • Section: doc
  • Architecture: all
  • Source Package: krb5
  • 3 optionale Abhängigkeiten
  • normalized package name match
  • Abgeglichen nach: Krb5
Debian stable package indexes · deb.debian.org · Debian stable package indexes: krb5-doc from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

krb5-gss-samples 1.21.3-5

MIT Kerberos GSS Sample applications

https://web.mit.edu/kerberos/

sudo apt install krb5-gss-samples
  • Section: net
  • Architecture: amd64
  • Source Package: krb5
  • 2 Abhängigkeiten
  • normalized package name match
  • Abgeglichen nach: Krb5
Debian stable package indexes · deb.debian.org · Debian stable package indexes: krb5-gss-samples from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

krb5-k5tls 1.21.3-5

TLS plugin for MIT Kerberos

https://web.mit.edu/kerberos/

sudo apt install krb5-k5tls
  • Section: net
  • Architecture: amd64
  • Source Package: krb5
  • 4 Abhängigkeiten
  • normalized package name match
  • Abgeglichen nach: Krb5
Debian stable package indexes · deb.debian.org · Debian stable package indexes: krb5-k5tls from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

krb5-kdc 1.21.3-5

MIT Kerberos key server (KDC)

https://web.mit.edu/kerberos/

sudo apt install krb5-kdc
  • Section: net
  • Architecture: amd64
  • Source Package: krb5
  • 16 Abhängigkeiten
  • 3 optionale Abhängigkeiten
  • normalized package name match
  • Abgeglichen nach: Krb5
Debian stable package indexes · deb.debian.org · Debian stable package indexes: krb5-kdc from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

krb5-kdc-ldap 1.21.3-5

MIT Kerberos key server (KDC) LDAP plugin

https://web.mit.edu/kerberos/

sudo apt install krb5-kdc-ldap
  • Section: net
  • Architecture: amd64
  • Source Package: krb5
  • 10 Abhängigkeiten
  • normalized package name match
  • Abgeglichen nach: Krb5
Debian stable package indexes · deb.debian.org · Debian stable package indexes: krb5-kdc-ldap from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

krb5-kpropd 1.21.3-5

MIT Kerberos key server (Slave KDC Support)

https://web.mit.edu/kerberos/

sudo apt install krb5-kpropd
  • Section: net
  • Architecture: amd64
  • Source Package: krb5
  • 9 Abhängigkeiten
  • 2 optionale Abhängigkeiten
  • normalized package name match
  • Abgeglichen nach: Krb5
Debian stable package indexes · deb.debian.org · Debian stable package indexes: krb5-kpropd from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

krb5-locales 1.21.3-5

internationalization support for MIT Kerberos

https://web.mit.edu/kerberos/

sudo apt install krb5-locales
  • Section: localization
  • Architecture: all
  • Source Package: krb5
  • normalized package name match
  • Abgeglichen nach: Krb5
Debian stable package indexes · deb.debian.org · Debian stable package indexes: krb5-locales from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

krb5-multidev 1.21.3-5

development files for MIT Kerberos without Heimdal conflict

https://web.mit.edu/kerberos/

sudo apt install krb5-multidev
  • Section: libdevel
  • Architecture: amd64
  • Source Package: krb5
  • 7 Abhängigkeiten
  • 1 optionale Abhängigkeiten
  • normalized package name match
  • Abgeglichen nach: Krb5
Debian stable package indexes · deb.debian.org · Debian stable package indexes: krb5-multidev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

krb5-otp 1.21.3-5

OTP plugin for MIT Kerberos

https://web.mit.edu/kerberos/

sudo apt install krb5-otp
  • Section: net
  • Architecture: amd64
  • Source Package: krb5
  • 6 Abhängigkeiten
  • normalized package name match
  • Abgeglichen nach: Krb5
Debian stable package indexes · deb.debian.org · Debian stable package indexes: krb5-otp from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

krb5-pkinit 1.21.3-5

PKINIT plugin for MIT Kerberos

https://web.mit.edu/kerberos/

sudo apt install krb5-pkinit
  • Section: net
  • Architecture: amd64
  • Source Package: krb5
  • 6 Abhängigkeiten
  • 1 optionale Abhängigkeiten
  • normalized package name match
  • Abgeglichen nach: Krb5
Debian stable package indexes · deb.debian.org · Debian stable package indexes: krb5-pkinit from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

krb5-user 1.21.3-5

basic programs to authenticate using MIT Kerberos

https://web.mit.edu/kerberos/

sudo apt install krb5-user
  • Section: net
  • Architecture: amd64
  • Source Package: krb5
  • 9 Abhängigkeiten
  • 2 optionale Abhängigkeiten
  • normalized package name match
  • Abgeglichen nach: Krb5
Debian stable package indexes · deb.debian.org · Debian stable package indexes: krb5-user from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

libgssapi-krb5-2 1.21.3-5

MIT Kerberos runtime libraries - krb5 GSS-API Mechanism

https://web.mit.edu/kerberos/

sudo apt install libgssapi-krb5-2
  • Section: libs
  • Architecture: amd64
  • Source Package: krb5
  • 5 Abhängigkeiten
  • 2 optionale Abhängigkeiten
  • normalized package name match
  • Abgeglichen nach: Krb5
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libgssapi-krb5-2 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

libgssrpc4t64 1.21.3-5

MIT Kerberos runtime libraries - GSS enabled ONCRPC

https://web.mit.edu/kerberos/

sudo apt install libgssrpc4t64
  • Section: libs
  • Architecture: amd64
  • Source Package: krb5
  • 2 Abhängigkeiten
  • 1 stellt bereit
  • 2 optionale Abhängigkeiten
  • normalized package name match
  • Abgeglichen nach: Krb5
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libgssrpc4t64 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

libk5crypto3 1.21.3-5

MIT Kerberos runtime libraries - Crypto Library

https://web.mit.edu/kerberos/

sudo apt install libk5crypto3
  • Section: libs
  • Architecture: amd64
  • Source Package: krb5
  • 2 Abhängigkeiten
  • 2 optionale Abhängigkeiten
  • normalized package name match
  • Abgeglichen nach: Krb5
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libk5crypto3 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

libkadm5clnt-mit12 1.21.3-5

MIT Kerberos runtime libraries - Administration Clients

https://web.mit.edu/kerberos/

sudo apt install libkadm5clnt-mit12
  • Section: libs
  • Architecture: amd64
  • Source Package: krb5
  • 7 Abhängigkeiten
  • 2 optionale Abhängigkeiten
  • normalized package name match
  • Abgeglichen nach: Krb5
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libkadm5clnt-mit12 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

Paketgraph

Links stammen aus dem lokalen Paketbeziehungsgraph, Ergänzungen, Abhängigkeitskanten, Ecosystem-Matches und Paket-Hub-Mitgliedschaft.

Verwandte Tools

  • openssl@3Runtime dependency declared by Homebrew.
  • cyrus-saslPopular package that depends on this formula.
  • libpqPopular package that depends on this formula.
  • msktutilPopular package that depends on this formula.
  • php@8.1Popular package that depends on this formula.
  • php@8.2Popular package that depends on this formula.

Gleicher Workflow

  • heimdalShares av.db curated category or tags: authentication, cli, kerberos, security.
  • kstartShares av.db curated category or tags: authentication, cli, kerberos, security.
  • google-authenticator-libpamShares av.db curated category or tags: authentication, cli, security.
  • linux-pamShares av.db curated category or tags: authentication, cli, security.
  • oath-toolkitShares av.db curated category or tags: authentication, cli, security.
  • oauth2_proxyShares av.db curated category or tags: authentication, cli, security.

Quellspur

Aus Repository-Daten generiert

Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.

Verwendete Quellen

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment