[22311] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Commit password change

daemon@ATHENA.MIT.EDU (John Hascall)
Mon Aug 30 12:46:19 2004

Message-Id: <200408301642.LAA16022@pvtest.ait.iastate.edu>
To: Digant Kasundra <digant@uta.edu>
In-reply-to: Your message of Mon, 30 Aug 2004 10:59:59 -0500.
             <CEE4E6ECB6C98C4281D09A17EC3DC0ED084BF092@exchange.uta.edu> 
Date: Mon, 30 Aug 2004 11:42:17 CDT
From: John Hascall <john@iastate.edu>
cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu


> Can someone tell me where in the code a password change is actually
> committed?  I see a handful or wrappers and related functions but I'm
> curious is there is one single point where a principal/password pair are
> written.

Almost.  You'll want to look in src/lib/kadm5/srv/svr_principal.c
We put hooks in these functions:
   kadm5_create_principal_3()
   kadm5_delete_principal()
   kadm5_rename_principal()
   kadm5_chpass_principal_3()

> My plan is to hook into that function to send principal/password pairs to an
> external auth service so that passwords can stay in sync.

Several of us have already done this.  If you search the archives
you'll probably find something that will help you.


John
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post