Project Review: kinit -C

[Ken Raeburn]

Wouldn't most of this problem go away if keytab types were pluggable?

If kinit gets the -C option, it sets the use-keytab flag and sets the keytab type to KDB: and goes about its business.  If the plugin doesn't exist (probably because you're not on the KDC), you detect the magic error code combined with the -C flag and print a custom message.  (Maybe more than one error code: keytab type unknown; database not found; permission denied.)  One kinit binary fits all.

That would just leave the question of whether pluggable keytab types are a good idea. :-)

Ken