Projects/Password quality pluggable interface - Revision history

Ghudson at 17:25, 12 October 2010

2010-10-12T17:25:25Z

2010-09-03T22:23:33Z

‎Consumer API

2010-08-31T01:36:20Z

‎Interface

2010-08-28T20:10:00Z

‎Consumer API

2010-08-28T16:55:30Z

‎Consumer API

2010-08-28T00:35:38Z

2010-08-28T00:34:51Z

‎Consumer API

2010-08-28T00:34:31Z

2010-08-28T00:09:14Z

‎Interface

2010-08-28T00:08:41Z

‎Interface

@@ Line 77: / Line 77: @@
   /* Load all available password quality plugin modules, perform resource binding
-   * of the realm's dictionary file, and store the result into *handles.  Free
+   * of the realm's dictionary file, and store the result into *handles_out.  Free
    * the result with k5_pwqual_free_handles. */
   krb5_error_code
-  k5_pwqual_load(krb5_context context, pwqual_handle **handles,
+  k5_pwqual_load(krb5_context context, const char *dict_file,
-                 const char *dict_file);
+                 pwqual_handle **handles_out);
   /* Release a handle list allocated by k5_pwqual_load. */

@@ Line 35: / Line 35: @@
                          krb5_pwqual_moddata *data);
    * Mandatory: Check a password for the principal princ, which has an associated
    * password policy named policy_name (or no associated policy if policy_name is
    */
   typedef krb5_error_code
   (*krb5_pwqual_check_fn)(krb5_context context, krb5_pwqual_moddata data,
                           const char *password, const char *policy_name,
-                          krb5_principal princ);
+                          krb5_principal princ, const char **languages);
   /* Optional: Release resources used by module data. */

← Older revision		Revision as of 20:10, 28 August 2010
Line 72:		Line 72:

	/* Release a handle list allocated by k5_pwqual_load. */		/* Release a handle list allocated by k5_pwqual_load. */
−	krb5_error_code
		+	void
	k5_pwqual_free_handles(krb5_context context, pwqual_handle *handles);		k5_pwqual_free_handles(krb5_context context, pwqual_handle *handles);

@@ Line 78: / Line 78: @@
   krb5_error_code
   k5_pwqual_check(krb5_context context, pwqual_handle handle,
-                  const char *password, kadm5_policy_ent_t policy,
+                  const char *password, const char *policy_name,
                   krb5_principal princ);

← Older revision	Revision as of 00:35, 28 August 2010
(No difference)

@@ Line 81: / Line 81: @@
                   krb5_principal princ);
-No wrapper is provided for the open or close methods because they are considered to be part of resource binding, and thus are taken care of by the _load and _free_handles functions.
+No wrappers are provided for the open or close methods because they are considered to be part of resource binding, and thus are taken care of by the _load and _free_handles functions.
 ==Built-In Modules==

@@ Line 56: / Line 56: @@
       /* Minor version 1 ends here. */
   } *krb5_pwqual_vtable;
 ==Built-In Modules==
@@ Line 70: / Line 96: @@
 Two other built-in mechanisms for checking password policy exist: enforcement of the password policy's minimum length and minimum number of character classes, and checking the new password against the current and historical key information.  These mechanisms are out of scope for the pluggable interface.

@@ Line 48: / Line 48: @@
   typedef void
   (*krb5_pwqual_close_fn)(krb5_context context, krb5_pwqual_moddata data);
 ==Built-In Modules==

← Older revision		Revision as of 00:08, 28 August 2010
Line 25:		Line 25:

	The pluggable interface will have the following methods:		The pluggable interface will have the following methods:
		+
		+	/* An abstract type for password quality module data. */
		+	typedef struct krb5_pwqual_moddata_st *krb5_pwqual_moddata;

	/* Optional: Initialize module data. dictfile is the realm's configured		/* Optional: Initialize module data. dictfile is the realm's configured