[15669] in Kerberos_V5_Development
Re: issue with krb5_prompter_posix() design
daemon@ATHENA.MIT.EDU (Greg Hudson)
Thu Apr 15 16:28:02 2010
From: Greg Hudson <ghudson@mit.edu>
To: Will Fiveash <will.fiveash@oracle.com>
In-Reply-To: <20100415202314.GA22981@sun.com>
Date: Thu, 15 Apr 2010 16:27:47 -0400
Message-ID: <1271363267.23242.526.camel@ray>
Mime-Version: 1.0
Cc: MIT Kerberos Dev List <krbdev@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
On Thu, 2010-04-15 at 16:23 -0400, Will Fiveash wrote:
> Seems to me the PAM approach is better since it's acquiring the reply.
> Anyway this is adding complication to the prompter bridge function I
> wrote in pam_krb5 to allow preauth plug-ins like pkinit to prompt via a
> PAM conversation function.
I agree that the PAM approach is better, but since this is a public
interface, I don't see any way of getting from here to there without
more pain than the benefit justifies.
(Barring some kind of generalized krb5 API revamp, anyway--not a venture
I'm prepared to charge ahead on while there are so many internals to
clean up.)
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
