Projects/Principal entry string mapping - Revision history

Ghudson: /* Admin Protocol */

2011-11-11T16:20:32Z

‎Admin Protocol

Ghudson at 21:55, 12 October 2011

2011-10-12T21:55:19Z

Ghudson at 18:10, 12 October 2011

2011-10-12T18:10:44Z

Ghudson at 18:10, 12 October 2011

2011-10-12T18:10:27Z

Ghudson: /* libkdb API */

2011-09-20T16:32:44Z

‎libkdb API

Ghudson at 16:17, 20 September 2011

2011-09-20T16:17:56Z

Ghudson: /* Data Model */

2011-09-19T21:53:15Z

‎Data Model

TomYu: fix typo

2011-09-19T20:35:49Z

fix typo

Ghudson at 18:58, 19 September 2011

2011-09-19T18:58:10Z

Ghudson: /* libkdb API */

2011-09-19T17:30:38Z

‎libkdb API

@@ Line 36: / Line 36: @@
 The function signatures for these RPCs are:
  kadm5_ret_t    kadm5_get_strings(void *server_handle,
                                   krb5_principal principal,

← Older revision		Revision as of 21:55, 12 October 2011
Line 77:		Line 77:

	krb5_dbe_set_string can return KRB5_KDB_STRINGS_TOOLONG if the resulting attribute set won't fit in a tl-data value (64K).		krb5_dbe_set_string can return KRB5_KDB_STRINGS_TOOLONG if the resulting attribute set won't fit in a tl-data value (64K).
		+
		+	==Release notes==
		+
		+	Administrator experience:
		+
		+	* Add support for string attributes on principal entries.

← Older revision		Revision as of 18:10, 12 October 2011
Line 1:		Line 1:
−	b{{project-rel\|1.10}}	+	{{project-rel\|1.10}}

	This project will add string attributes to krb5 principal entries in the KDB, along with kadmin support for displaying and modifying string attributes. KDC plugins (such as preauth plugins) will be able to examine string attributes.		This project will add string attributes to krb5 principal entries in the KDB, along with kadmin support for displaying and modifying string attributes. KDC plugins (such as preauth plugins) will be able to examine string attributes.

← Older revision		Revision as of 18:10, 12 October 2011
Line 1:		Line 1:
−	{{project-~~review~~\|~~2011-09-22~~}}	+	b{{project-rel\|1.10}}
−	{{project-target\|1.10}}

	This project will add string attributes to krb5 principal entries in the KDB, along with kadmin support for displaying and modifying string attributes. KDC plugins (such as preauth plugins) will be able to examine string attributes.		This project will add string attributes to krb5 principal entries in the KDB, along with kadmin support for displaying and modifying string attributes. KDC plugins (such as preauth plugins) will be able to examine string attributes.

@@ Line 57: / Line 57: @@
 ===libkdb API===
-The following accessors allow string attributes for an entry to be manipulated (set_string with a null value deletes a key):
+The following accessors allow string attributes for an entry to be manipulated (set_string with a null value deletes a key; get_string returns a null value for a nonexistent key):
  krb5_error_code

@@ Line 12: / Line 12: @@
 ==Data Model==
-Principal entries will gain a mapping from keys and values (both C-strings), stored via tl-data.  We assume that strings attributes will be fairly short and limited in number, so no great attention is needed to efficiency.  There is no particular discipline for assigning keys names; we assume that plugins will use prefixes like "otp-" to avoid conflicts.  At least initially, there will be no validation on values to ensure that they are well-formed for the consuming plugin, although this could be added in the future by adding validation methods to KDC plugin interfaces.
+Principal entries will gain a mapping from keys to values (both C strings), stored via tl-data.  We assume that strings attributes will be fairly short and limited in number, so no great attention is needed to efficiency.  Keys are unique (a given key has only one value).  There are no guarantees of any particular key order when string attributes are retrieved.  There is no particular discipline for assigning keys names; we assume that plugins will use prefixes like "otp-" to avoid conflicts.  At least initially, there will be no validation on values to ensure that they are well-formed for the consuming plugin, although this could be added in the future by adding validation methods to KDC plugin interfaces.
 String attributes will be represented by a tl-data value containing a concatenation of alternating zero-terminated key and value strings.  This representation is incidentally visible across the kadmin protocol but is explicitly not guaranteed at that layer.
@@ Line 23: / Line 23: @@
 * get_strings, getstrs: View string attributes a principal.
-* set_string, setstr: Set a string attribute on a principal.
+* set_string, setstr: Change or add a string attribute on a principal.
 * del_string, delstr: Remove a string attribute from a principal.
@@ Line 33: / Line 33: @@
 * get_strings: Get the list of string attributes on an entry.
-* set_string: Change or unset a string attribute on an entry.
+* set_string: Change, add, or delete (with a null value) a string attribute on an entry.
 The function signatures for these RPCs are:
@@ Line 57: / Line 57: @@
 ===libkdb API===
-The following accessors allow string attributes for an entry to be manipulated:
+The following accessors allow string attributes for an entry to be manipulated (set_string with a null value deletes a key):
  krb5_error_code
@@ Line 76: / Line 76: @@
  void
  krb5_dbe_free_string(krb5_context, char *);

← Older revision		Revision as of 20:35, 19 September 2011
Line 1:		Line 1:
−	{{{project-review\|2011-09-22}}	+	{{project-review\|2011-09-22}}
	{{project-target\|1.10}}		{{project-target\|1.10}}

← Older revision		Revision as of 18:58, 19 September 2011
Line 1:		Line 1:
−	{{project-~~early~~}}	+	{{{project-review\|2011-09-22}}
	{{project-target\|1.10}}		{{project-target\|1.10}}

@@ Line 61: / Line 61: @@
  krb5_error_code
  krb5_dbe_get_strings(krb5_context context, krb5_db_entry *entry,
-                      krb5_string_attr ***strings_out);
+                      krb5_string_attr **strings_out, int *count_out);
  krb5_error_code
@@ Line 70: / Line 70: @@
  krb5_dbe_set_string(krb5_context context, krb5_db_entry *entry,
                      const char *key, const char *value);