r6498: Add comments in line with those I already added to 3.0.

Please don't re-invent security=server :-)

Andrew Bartlett

diff --git a/source/auth/auth.h b/source/auth/auth.h
index f64017832d9baa335948633c56a15888c75975af..1ac0b82e1722c617ed10f9e8ad88af87a9518510 100644 (file)
--- a/source/auth/auth.h
+++ b/source/auth/auth.h
@@ -103,8 +103,15 @@ struct auth_method_context;
 struct auth_operations {
        const char *name;
 
+       /* If you are using this interface, then you are probably
+        * getting something wrong.  This interface is only for
+        * security=server, and makes a number of compromises to allow
+        * that.  It is not compatible with being a PDC.  */
+
        NTSTATUS (*get_challenge)(struct auth_method_context *ctx, TALLOC_CTX *mem_ctx, DATA_BLOB *challenge);
 
+       /* Given the user supplied info, check a password */
+
        NTSTATUS (*check_password)(struct auth_method_context *ctx, TALLOC_CTX *mem_ctx,
                                   const struct auth_usersupplied_info *user_info,
                                   struct auth_serversupplied_info **server_info);