removing pa_type from krb5_get_init_creds_opt_set_pa

Ken Renard kdrenard at wareonearth.com
Thu Dec 7 15:15:13 EST 2006


On Dec 7, 2006, at 2:41 PM, Douglas E. Engert wrote:

>
> You could say the attribute names should start with the name of the  
> plugin.
> The plugin names have to be unique?

While you could, in theory, have multiple plugins with the same name  
[i.e. krb5plugin_preauth_client_ftable_v0.name], this seems reasonable.

Any thoughts on extending this to the KDC side such that plugin  
configuration attribute/value pairs could be passed into the plugin- 
 >init() function at KDC startup?  An extra look into the kdc.conf to  
get preauth plugin attribute/value pairs?

-Ken Renard



More information about the krbdev mailing list