Proper way to do logging (KDC) from preauth plugin?

[Sam Hartman]

>>>>> "Greg" == Greg Hudson <ghudson at MIT.EDU> writes:

    Greg> On Mon, 2010-05-10 at 05:16 -0400, Sam Hartman wrote:
    >> Actually, does PA_REQUIRED actually require that the client
    >> include that particular pa type or simply require that if present
    >> it must succeed?

    Greg> The latter, which seems to make the flag pretty meaningless.

Hmm. that seems fairly useful to me.