[20512] in Kerberos_V5_Development

home help back first fref pref prev next nref lref last post

KDB module using existing kdb module as a base

daemon@ATHENA.MIT.EDU (Andreas Schneider via krbdev)
Tue Nov 26 06:28:27 2024

To: krbdev@mit.edu
Date: Tue, 26 Nov 2024 12:28:03 +0100
Message-ID: <2413859.cojqenx9y0@magrathea>
MIME-Version: 1.0
From: Andreas Schneider via krbdev <krbdev@mit.edu>
Reply-To: Andreas Schneider <asn@samba.org>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu

Hi Greg,

as you might have seen already by PR 1393 we are adding alias support to 
klmdb. For the localkdc we need a module which exposes local accounts 
(passdb). This way you don't have to add them via kadmin.

Alexander and I came up with the idea to write a new module but use the klmdb 
module as a base. This way we just need to implement put_principal and 
get_principal to handle passwd accounts and for all the rest use klmdb. Also 
we need to add PAC with SIDs.

In order to get that working we would need a public function like 
kdb_find_library(), kdb_lib_get_vftbl() and free function.

If that is fine for you we would create an PR with a draft.


Cheers


	Andreas

-- 
Andreas Schneider                      asn@samba.org
Samba Team                             www.samba.org
GPG-ID:     8DFF53E18F2ABC8D8F3C92237EE0FC4DCC014E3D


_______________________________________________
krbdev mailing list             krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev

home help back first fref pref prev next nref lref last post