Implementing preauthentication using loadable modules

Sam Hartman hartmans-ietf at MIT.EDU
Sat Sep 30 18:48:24 EDT 2006


>>>>> "Nicolas" == Nicolas Williams <Nicolas.Williams at sun.com> writes:

    Nicolas> On Fri, Sep 29, 2006 at 03:59:14PM -0400, Jim Rees wrote:
    >> I think the tricky part will be deciding on the arguments to
    >> the functions.  As Sam points out, the pkinit plugin probably
    >> wants the full request body.  And the next guy who writes a
    >> plugin will want something else we didn't think of.  Maybe they
    >> should even be extensible structs so we can add arguments later
    >> (with a version bump of course).

    Nicolas> Pass such things through an extensible object that
    Nicolas> represents the PDU in question (request, reply) and
    Nicolas> provide accessors as needed.

The Redhat interface roughly already has this.



More information about the krbdev mailing list