On Sep 4, 2007, at 23:47, Ken Raeburn via RT wrote:

> On Aug 29, 2007, at 01:18, Austin Jennings via RT wrote:
>> This is an Apple-specific mechanism for keeping Kerberos passwords
>> synchronized with other authentication mechanisms.  Unfortunately,
>> there really isn't any documentation to cite here.
>
> From looking at the patch, actually it doesn't look like it relates
> to password synchronization, just ties in to some an account
> management system for unspecified purposes.  The code seems to have
> about two lines of comments as to the purpose of these calls (at a
> higher level than "send a line to the server").
>
> (There is some password-synchronization code that lxs integrated a
> few years ago for Apple, which at this point probably would also be
> best made into a plugin, but that's another matter...)
>
> Ken
>
>
>

This patch predates me, so I can only speculate that it's building on  
top of the work that lxs did previously.  I believe Simon Cooper has  
some familiarity with this, so you may want to get in touch him and  
see if he can offer some details.