Proposal: krb5_get_init_creds_opt_set_change_password_prompt

Jeffrey Altman jaltman at secure-endpoints.com
Wed Nov 15 16:56:47 EST 2006


Sam:

Here is an alternate proposal that does not modify the
get_init_creds_options structure.  This patch only relies upon
the flags field.  By doing so it precludes any ability with the
current implementation to disable password change prompting via
a profile value.

Jeffrey Altman


Sam Hartman wrote:
> Jeff, the get_init_creds_options structure is exposed in the ABI.
> 
> We do need a way of extending that structure for preauth plugin
> options, and if we can get it for 1.6 we want it.  But it needs to be
> more complicated than what you provide.
> 
> My best guess is that we provide a new allocator function and a way of
> detecting wether the caller has used this new allocate function or
> not.
> 
> I'd like to find a simpler solution than that.
> 
> Other than the ABI problem, your proposal looks reasonable.
> 
> --Sam

-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: krb5-gic-chng-pwd-prmpt-diff-2.txt
Url: http://mailman.mit.edu/pipermail/krbdev/attachments/20061115/d44bf513/attachment.txt


More information about the krbdev mailing list