Dynamic plugin modules and OS packages (Russ Allbery)

Lee Hinman lhinman at wareonearth.com
Wed Jul 14 13:59:21 EDT 2010

> Message: 2
> Date: Tue, 13 Jul 2010 13:46:55 -0700
> From: Russ Allbery <rra at stanford.edu>
> Subject: Re: Dynamic plugin modules and OS packages
> To: krbdev at mit.edu
> Message-ID: <87eif79kjk.fsf at windlord.stanford.edu>
> Content-Type: text/plain; charset=us-ascii
> ghudson at MIT.EDU writes:
>>   * We add "include" support to the profile library, and the OS adds
>>     "include /etc/krb5.conf.d/*" to its standard krb5.conf.  Each
>>     plugin package supplies a profile fragment giving the location of
>>     the dynamic object and an enable/disable boolean (which may
>>     default to on or off depending on the packaging model and/or the
>>     plugin).
> I prefer this approach.  I've been wanting this for a long time for other
> reasons.
> This enables using the Debian Apache packaging approach for enabling or
> disabling plugins, where the plugin configuration files are installed in a
> separate location and selectively symlinked into the include directory for
> krb5.conf using a tool that adds or removes the symlinks to enable or
> disable the plugins.

I think this approach has another advantage as well.  It would map onto
the Windows registry idea pretty easily.  That would make it easier for
the Windows port to find any plugins.

Lee Hinman

More information about the krbdev mailing list