Project review: policy refcount elimination
ghudson at MIT.EDU
Mon Jan 7 12:24:33 EST 2013
I've written up a project page on eliminating the policy refcount
The design I'm advocating goes a little further than just eliminating
the refcount, and explicitly allows principals to refer to policy names
which don't exist as objects in the DB. A dangling reference can be
useful to a pwqual plugin module (which receives the policy name), or
the policy object can be created later.
Comments are appreciated.
More information about the krbdev