[1191] in Kerberos_V5_Development

home help back first fref pref prev next nref lref last post

Re: krb5_db_entry and kadm5 info

daemon@ATHENA.MIT.EDU (Sam Hartman)
Thu May 16 02:26:33 1996

To: "Barry Jaspan" <bjaspan@MIT.EDU>
Cc: krbdev@MIT.EDU
From: Sam Hartman <hartmans@MIT.EDU>
Date: 16 May 1996 02:26:22 -0400
In-Reply-To: "Barry Jaspan"'s message of Wed, 15 May 1996 15:56:08 -0400

>>>>> "bjaspan" == "Barry Jaspan" <bjaspan@MIT.EDU> writes:


    bjaspan> In short, I'd like to remove the tl_data list from
    bjaspan> krb5_db_entry, and add the following fields:

	I strongly disagree with removing this mechanism.  The intent
of the mechanism is to allow third parties or seldom-used features of
the database to associate data with a principal in the databse.
Considering how useful this would have been for OV, I think its need
is already justified.  

    bjaspan> 	int version; /* database entry vno */

	It is intended that the length field at the beginning of the
db_entry serve as a version number and length; the length will only be
increased.  This was done for compactness on disk.  I am not convinced
that I agree with this decision, but I figured that noting it couldn't
hurt.  

	I agree that adding the remaining fields is appropriate.

    bjaspan> Barry


home help back first fref pref prev next nref lref last post