[1331] in Kerberos_V5_Development
V4 kadmin server
daemon@ATHENA.MIT.EDU (Barry Jaspan)
Tue Jun 18 14:02:26 1996
Date: Tue, 18 Jun 96 14:02:15 -0400
From: "Barry Jaspan" <bjaspan@MIT.EDU>
To: krbdev@MIT.EDU
I have just porting the V4 kadmin server to work with the kadm5 admin
system. It works, and the automated tests we wrote at OV pass.
When we first wrote this code at OV, we #ifdef'ed all the changes so
that the V4 kadmin server could be compiled either to use the
ovsec_kadm (now kadm5) api or to use the libkdb interface. Now that
kadm5 is part of MIT Kerberos, I think it makes sense for the program
just to be written in terms of kadm5 without the #ifdef's. This will
result in a much cleaner, more flexible program that will also enforce
kadm5's password policies.
The downside is that we only implemented the change-password function
of V4 kadmind. The other functions could be implemented easily
enough, and in fact that would be a good project for someone that
wants to learn the kadm5 api.
comments?
Barry
