krb1.5 plugin interface query

Ken Raeburn raeburn at MIT.EDU
Sun Sep 10 19:58:26 EDT 2006


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sep 10, 2006, at 19:35, Andrew Bartlett wrote:
>> kdc location: Are you doing anything interesting where krb5.conf
>> entries or DNS SRV records won't cut it for locating your KDCs?
>
> Ahh, so this is the correct way to solve the disgusting hacks  
> currently
> being placed in Samba 3.0, where we rewrite the krb5.conf for
> DC-affinity and discovery purposes...

That's the theory... let us know if it's not sufficient.

There's a sample plugin included in the released sources, which  
demonstrates the use of the interface.  (It also demonstrates how to  
load a Python interpreter and run a script, so it's a bit hairier  
than simply showing off the interface.  And probably not thread-safe,  
and may have leaks, etc.  It's just a quick demo, we don't install it.)

Ken


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (Darwin)

iD8DBQFFBKaoUqOaDMQ+e5gRAh4fAKCLC7r41DP/ZyJKfbcuVluPGqboMACeIXwS
vPGg9yKtOmwNp5ffwYuPv/Q=
=swVr
-----END PGP SIGNATURE-----



More information about the Kerberos mailing list