An alternative plan for principal mapping

Will Fiveash William.Fiveash at
Tue Aug 1 15:24:26 EDT 2006

On Tue, Aug 01, 2006 at 10:46:33AM -0700, Henry B. Hotz wrote:
> On Aug 1, 2006, at 9:03 AM, krbdev-request at wrote:
> ...
> > This relates to something I brought up before on this list and that is
> > support for login policy plugins (LPP).  Note, this is distinct from
> > password policy.  The KDC would interact with a LPP in two ways:
> In effect this is an authorization policy, not an authentication policy.

Essentially that is correct.

Will Fiveash
Sun Microsystems Inc.
Austin, TX, USA (TZ=CST6CDT)

More information about the krbdev mailing list