removing pa_type from krb5_get_init_creds_opt_set_pa
Ken Renard
kdrenard at wareonearth.com
Thu Dec 7 15:15:13 EST 2006
On Dec 7, 2006, at 2:41 PM, Douglas E. Engert wrote:
>
> You could say the attribute names should start with the name of the
> plugin.
> The plugin names have to be unique?
While you could, in theory, have multiple plugins with the same name
[i.e. krb5plugin_preauth_client_ftable_v0.name], this seems reasonable.
Any thoughts on extending this to the KDC side such that plugin
configuration attribute/value pairs could be passed into the plugin-
>init() function at KDC startup? An extra look into the kdc.conf to
get preauth plugin attribute/value pairs?
-Ken Renard
More information about the krbdev
mailing list