Date: Wed, 05 Sep 2007 00:07:39 -0700
From: Austin Jennings <austin.jennings@apple.com>
Subject: Re: [krbdev.mit.edu #5658] kdc notify pws
In-Reply-To: <rt-5658-24708.10.5872341295215@krbdev.mit.edu>
To: rt-comment@krbdev.mit.edu
CC: Simon Cooper <scooper@apple.com>
Message-ID: <826ADE11-5692-4310-9862-5BA25025E193@apple.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes
Content-Transfer-Encoding: 7BIT
References: <rt-5658-24708.10.5872341295215@krbdev.mit.edu>
RT-Send-Cc: 
Content-Length: 1091


On Sep 4, 2007, at 23:47, Ken Raeburn via RT wrote:

> On Aug 29, 2007, at 01:18, Austin Jennings via RT wrote:
>> This is an Apple-specific mechanism for keeping Kerberos passwords
>> synchronized with other authentication mechanisms.  Unfortunately,
>> there really isn't any documentation to cite here.
>
> From looking at the patch, actually it doesn't look like it relates
> to password synchronization, just ties in to some an account
> management system for unspecified purposes.  The code seems to have
> about two lines of comments as to the purpose of these calls (at a
> higher level than "send a line to the server").
>
> (There is some password-synchronization code that lxs integrated a
> few years ago for Apple, which at this point probably would also be
> best made into a plugin, but that's another matter...)
>
> Ken
>
>
>

This patch predates me, so I can only speculate that it's building on  
top of the work that lxs did previously.  I believe Simon Cooper has  
some familiarity with this, so you may want to get in touch him and  
see if he can offer some details.