Project review: policy refcount elimination

Greg Hudson ghudson at MIT.EDU
Mon Jan 7 12:24:33 EST 2013

I've written up a project page on eliminating the policy refcount

The design I'm advocating goes a little further than just eliminating
the refcount, and explicitly allows principals to refer to policy names
which don't exist as objects in the DB.  A dangling reference can be
useful to a pwqual plugin module (which receives the policy name), or
the policy object can be created later.

Comments are appreciated.

More information about the krbdev mailing list