Proposal: krb5_get_init_creds_opt_set_change_password_prompt

Kevin Coffman kwc at
Thu Dec 7 12:10:09 EST 2006

On 12/7/06, Douglas E. Engert <deengert at> wrote:
> If you take out the pa_type, then you would have the
> -pp option I was talking about, and  I would suspect get
> around Sam's objections about OpenSSL/pkinit specifics.
> I suspose the -pp could have the pa_data type too.

Agreed.  I thought it was looking for trouble to assume we could get
all current and future preauth types (and implementations) to agree
what attribute "foo" means.  To me, it seems ambitious enough to get
all pkinit implementations to agree.  But maybe I'm just being

More information about the krbdev mailing list