Draft specification for kadmind plugin API

[John Hascall]

> John Hascall <john at iastate.edu> writes:
> >    For our needs, the same calling sequence for passowrd-check 
> >    would work for creation:
> > krb5_error_code (*created)(void *, const char *password,
> >                                    const char *principal,
> >                                    char *errstr, int errstrlen);
> >    but I can understand how others might need more info about
> >    the principal (policy? flags?)  And along the same lines:
> > krb5_error_code (*deleted)(void *, const char *principal,
> >                                    char *errstr, int errstrlen);
> > krb5_error_code (*renamed)(void *, const char *old_principal,
> >                                    const char *new_principal,
> >                                    char *errstr, int errstrlen);

> Should these be precommit or postcommit, or both?

   We currently do postcommit only, but I expect you ought
   to specify both for consistency and because sure enough
   somebody else will want it if you don't.


John