Proposal: krb5_get_init_creds_opt_set_change_password_prompt
Jeffrey Altman
jaltman at secure-endpoints.com
Wed Nov 15 16:56:47 EST 2006
Sam:
Here is an alternate proposal that does not modify the
get_init_creds_options structure. This patch only relies upon
the flags field. By doing so it precludes any ability with the
current implementation to disable password change prompting via
a profile value.
Jeffrey Altman
Sam Hartman wrote:
> Jeff, the get_init_creds_options structure is exposed in the ABI.
>
> We do need a way of extending that structure for preauth plugin
> options, and if we can get it for 1.6 we want it. But it needs to be
> more complicated than what you provide.
>
> My best guess is that we provide a new allocator function and a way of
> detecting wether the caller has used this new allocate function or
> not.
>
> I'd like to find a simpler solution than that.
>
> Other than the ABI problem, your proposal looks reasonable.
>
> --Sam
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: krb5-gic-chng-pwd-prmpt-diff-2.txt
Url: http://mailman.mit.edu/pipermail/krbdev/attachments/20061115/d44bf513/attachment.txt
More information about the krbdev
mailing list