An alternative plan for principal mapping

[Will Fiveash]

On Tue, Aug 01, 2006 at 10:46:33AM -0700, Henry B. Hotz wrote:
> 
> On Aug 1, 2006, at 9:03 AM, krbdev-request at mit.edu wrote:
> ...
> 
> > This relates to something I brought up before on this list and that is
> > support for login policy plugins (LPP).  Note, this is distinct from
> > password policy.  The KDC would interact with a LPP in two ways:
> 
> In effect this is an authorization policy, not an authentication policy.

Essentially that is correct.

-- 
Will Fiveash
Sun Microsystems Inc.
Austin, TX, USA (TZ=CST6CDT)