[16433] in Kerberos_V5_Development
Re: Options for dealing with LDAP policy refcounts
daemon@ATHENA.MIT.EDU (Sam Hartman)
Thu Oct 7 14:03:12 2010
From: Sam Hartman <hartmans@mit.edu>
To: ghudson@mit.edu
Date: Thu, 07 Oct 2010 14:02:55 -0400
In-Reply-To: <201010071642.o97GgJU0005380@outgoing.mit.edu> (ghudson@mit.edu's
message of "Thu, 7 Oct 2010 12:42:19 -0400 (EDT)")
Message-ID: <tslwrptdgog.fsf@carter-zimmerman.suchdamage.org>
MIME-Version: 1.0
Cc: krbdev@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
I'm OK with either option.
I agree that if we move the handling of the policy refcount into the db
backend, that the complexity moves from kadm5srv to either libkdb or the
db2 backend. I disagree that it has to be in the db2 put_principal
routine and believe the overall complexity of the system could be
conserved. I can help explore this if others are interested. However
I'm guessing Greg prefers his options to something along these lines and
I don't have an opinion.
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
