pam-krb5 3.6 released

Russ Allbery rra at stanford.edu
Thu Sep 20 13:24:56 EDT 2007


Sam Hartman <hartmans at mit.edu> writes:

> I'd definitely be interested in proposals in this space.  I'd prefer
> things that worked at the rd_req level than the verify creds level but
> would look at either.

I only mention verify_creds because that's what the applications call now,
and it would be nice to increase the capability of the API seamlessly.
(You probably know that.)

Also to mention something that you know but that others may not,
verify_creds essentially does a mk_req and rd_req under the hood, except
in a kind of weird way with a memory ticket cache and some other oddities.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>



More information about the Kerberos mailing list