[PATCH 2/2] pass the verto_ctx into preauth plugins

Greg Hudson ghudson at MIT.EDU
Thu Nov 10 10:54:55 EST 2011


On 11/10/2011 05:24 AM, Sam Hartman wrote:
> I wonder whether providing the verto context as part of the KDC rock
> would be a better idea.  I think we definitely want to avoid a
> dependency on the kernel lib on verto.

I kind of like the idea of getting the loop via callback, but it doesn't
solve the stated problem, since we'd have to declare the callback in
preauth_plugin.h.  Either we (1) somehow make the kernel lib not depend
on preauth_plugin.h, (2) supply the verto context as a void pointer, or
(3) accept the dependency for the moment.

> I also think that since most preauth plugins and most entry points
> do not need a verto context it should come from the rock if needed.

That's a reasonable argument.

> Regardless, I think the krb5_context should come before the
> verto_context.

Yes.



More information about the krbdev mailing list