Review of Projects/Kadmin hook interface

[Sam Hartman]

>>>>> "Nicolas" == Nicolas Williams <Nicolas.Williams at oracle.com> writes:

    Nicolas> On Mon, Sep 27, 2010 at 11:32:30AM -0700, Russ Allbery wrote:
    >> I would also document how this module is called if the key is
    >> being randomized (if at all).  It would probably be best to add a
    >> separate interface that gets all of the keys, although in my
    >> specific use case (propagation to Active Directory), there isn't
    >> anything one can really do about a randomized key other than
    >> randomizing the password in Active Directory (to something
    >> unrelated to the new randomized key).

    Nicolas> Why not just do password change with randomized password,
    Nicolas> so that way you have a password you can synchronize?  This
    Nicolas> is basically what AD does too.

I'd support this change, although it's probably beyond the scope of what
I'm doing to implement.

--Sam