Password sync plugin, and questions about plugin criticality

Ken Hornstein kenh at cmf.nrl.navy.mil
Mon Jun 26 09:31:21 EDT 2006


>>I don't think I can; some people absolutely want external password sync
>>to happen before the password gets written locally; other people
>>want the exact opposite.
>
>Conversely, you can collapse them into one without separating
>quality checking from pre-commit synchronization, as long as
>the plugin can return some value which indicates whether the
>password change should be aborted.

I don't see how that meets the goal of having it done before or
after the password gets written locally.  I mean, you're presumably
only calling the function before or after the password gets
written to the local database.  Some people empatically want it
one way, some people emphatically want it the other way.

--Ken



More information about the krbdev mailing list