String attributes feature (project review)

Dmitri Pal dpal at redhat.com
Mon Sep 19 23:55:20 EDT 2011


On 09/19/2011 03:01 PM, ghudson at MIT.EDU wrote:
> I've written up a proposal for adding string attributes to principals.
> It's at:
>
> http://k5wiki.kerberos.org/wiki/Projects/Principal_entry_string_mapping
>
> The immediate use case for this feature is per-principal configuration
> for the OTP KDC preauth plugin.
>
> I'll likely commit an implementation in a day or so if there's no
> initial negative feedback on the design.
> _______________________________________________
> krbdev mailing list             krbdev at mit.edu
> https://mailman.mit.edu/mailman/listinfo/krbdev
>
>
It seems that interface assumes that keys are unique. This is fine but
just would be nice to mention.
I assume "set" acts as add if string does not yet exist, right?

Is unset accomplished using NULL value for value? Will it delete the key?

Any expectations about sort order for the keys in the list?

What kinds of errors are returned?

-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager IPA project,
Red Hat Inc.


-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/






More information about the krbdev mailing list