File: kadm5_hook.rst.txt

package info (click to toggle)
krb5 1.17-3%2Bdeb10u4
  • links: PTS, VCS
  • area: main
  • in suites: buster
  • size: 53,236 kB
  • sloc: ansic: 305,293; exp: 13,345; cpp: 9,731; javascript: 9,118; python: 8,980; makefile: 7,216; sh: 6,279; perl: 2,391; asm: 1,460; yacc: 1,005; awk: 396; csh: 147; xml: 135; lisp: 104; sed: 41
file content (27 lines) | stat: -rw-r--r-- 1,228 bytes parent folder | download | duplicates (12)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
.. _kadm5_hook_plugin:

KADM5 hook interface (kadm5_hook)
=================================

The kadm5_hook interface allows modules to perform actions when
changes are made to the Kerberos database through :ref:`kadmin(1)`.
For a detailed description of the kadm5_hook interface, see the header
file ``<krb5/kadm5_hook_plugin.h>``.

The kadm5_hook interface has five primary methods: **chpass**,
**create**, **modify**, **remove**, and **rename**.  (The **rename**
method was introduced in release 1.14.)  Each of these methods is
called twice when the corresponding administrative action takes place,
once before the action is committed and once afterwards.  A module can
prevent the action from taking place by returning an error code during
the pre-commit stage.

A module can create and destroy per-process state objects by
implementing the **init** and **fini** methods.  State objects have
the type kadm5_hook_modinfo, which is an abstract pointer type.  A
module should typically cast this to an internal type for the state
object.

Because the kadm5_hook interface is tied closely to the kadmin
interface (which is explicitly unstable), it may not remain as stable
across versions as other public pluggable interfaces.