In-Reply-To: <rt-5658-24603.6.51837012245736@krbdev.mit.edu>
References: <rt-5658-24603.6.51837012245736@krbdev.mit.edu>
MIME-Version: 1.0 (Apple Message framework v752.3)
Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed
Message-ID: <93C6F803-C3ED-469B-AB29-91B76C824DEB@mit.edu>
Content-Transfer-Encoding: 7bit
From: Ken Raeburn <raeburn@mit.edu>
Subject: Re: [krbdev.mit.edu #5658] kdc notify pws
Date: Wed, 5 Sep 2007 02:47:29 -0400
To: rt@krbdev.mit.edu
RT-Send-Cc: 
Content-Length: 772

On Aug 29, 2007, at 01:18, Austin Jennings via RT wrote:
> This is an Apple-specific mechanism for keeping Kerberos passwords
> synchronized with other authentication mechanisms.  Unfortunately,
> there really isn't any documentation to cite here.

 From looking at the patch, actually it doesn't look like it relates  
to password synchronization, just ties in to some an account  
management system for unspecified purposes.  The code seems to have  
about two lines of comments as to the purpose of these calls (at a  
higher level than "send a line to the server").

(There is some password-synchronization code that lxs integrated a  
few years ago for Apple, which at this point probably would also be  
best made into a plugin, but that's another matter...)

Ken