[20512] in Kerberos_V5_Development
KDB module using existing kdb module as a base
daemon@ATHENA.MIT.EDU (Andreas Schneider via krbdev)
Tue Nov 26 06:28:27 2024
To: krbdev@mit.edu
Date: Tue, 26 Nov 2024 12:28:03 +0100
Message-ID: <2413859.cojqenx9y0@magrathea>
MIME-Version: 1.0
From: Andreas Schneider via krbdev <krbdev@mit.edu>
Reply-To: Andreas Schneider <asn@samba.org>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
Hi Greg,
as you might have seen already by PR 1393 we are adding alias support to
klmdb. For the localkdc we need a module which exposes local accounts
(passdb). This way you don't have to add them via kadmin.
Alexander and I came up with the idea to write a new module but use the klmdb
module as a base. This way we just need to implement put_principal and
get_principal to handle passwd accounts and for all the rest use klmdb. Also
we need to add PAC with SIDs.
In order to get that working we would need a public function like
kdb_find_library(), kdb_lib_get_vftbl() and free function.
If that is fine for you we would create an PR with a draft.
Cheers
Andreas
--
Andreas Schneider asn@samba.org
Samba Team www.samba.org
GPG-ID: 8DFF53E18F2ABC8D8F3C92237EE0FC4DCC014E3D
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev