Updated draft for kadmind plugin API

[John Hascall]

> Nicolas Williams <Nicolas.Williams at sun.com> writes:
> > On Sat, Apr 21, 2007 at 03:25:12PM -0700, Russ Allbery wrote:
> >>           krb5_error_code (*check)(void *, krb5_principal,
> >>                                    const char *password,
> >>                                    char *errstr, int errstrlen);
> >                                      ^^^^^^^^^^^^^^^^^^^^^^^^^^^

> > I'd rather have the module output a pointer to a string and that the
> > caller have to call a module function to release it.  Else the caller
> > has to have code to do the buffer realloc dance -- ugh.

> Would people rather see a char **errstr and a new error_free hook for both
> modules?

   Yes, that seems more "kerberos-like".

John