Some additional notes on the HP port:

1) Kerberos ticket filenames have been changed from the MIT defaults.
   The filenames are for each of the following:
     default			/tmp/tkt<uid>.<host>
     logging in (klogin)	/tmp/tkt_<tty>.<host>
     becoming root (ksu)	/tmp/tkt_root_<uid>.<host>
     becoming root (ksu2)	/tmp/tkt_<tty>_<user>.<host>
   Basically, the difference is the addition of .<host>.  ksu2 is not an
   HP-UX command and is not in the MIT distribution, so it is different.

2) kinit gives the maximum ticket lifetime (21 hours) for non-root
   principals and a 2 hour ticket lifetime for root principals.

3) vuelogin and klogin both give maximum ticket lifetimes.

4) krlogind invokes /usr/local/etc/klogin.

5) krcp invokes krcp on the remote system.

6) The Kerberos master key is stashed in /kerberos.

7) The service keys are stored in /usr/local/etc/srvtab.

8) If the domain name server is not used, make sure that the first entry
   in the hosts file for each host is the fully qualified domain name.
   Service instances should all be fully qualified domain names.

9) klogin allows Kerberos failures and will resort to the passwd file for
   authentication.  klogin.krbonly will use only Kerberos authentication.

10) vuelogin/vuegreet/vuesession will use only Kerberos authentication.

11) kx11lock and kxlogin allow Kerberos failures and will resort to the
    passwd file for authentication.  kx11lock.krbonly and kxlogin.krbonly
    will use only Kerberos authentication.

12) ksu and ksu2 will use only Kerberos authentication.

13) kadmind will automatically cause the slave servers to be updated when
    the master database has been modified.

14) The functionality of kpasswd has been incorporated into kadmin.
