Re: KUNCUserNotificationCallBack

Subject: Re: KUNCUserNotificationCallBack

From: Garth Cummings <email@hidden>

Date: Fri, 17 Aug 2007 12:33:03 -0700

Delivered-to: email@hidden

Hi Eric,

On Aug 17, 2007, at 11:45 AM, Eric Long wrote:

In my KUNCUserNotificationCallBack, after I get the user's name/password,
how do I validate that this is a user name and password for a user with
admin privileges? I haven't been able to find the way to do this in the
kernel.

You don't.

Keep in mind that authenticating a user might involve communicating with a number of directory servers, or might even mean prompting for a smart card PIN or fingerprint. To play well with the rest of the system, one should not put up their own UI for account credentials outside of an authorization plugin.

Also, KUNC is deprecated. Your code won't last long if it depends on KUNC.

I suggest looking at "Authorization Plug-in Reference" <http://developer.apple.com/documentation/Security/Reference/AuthorizationPluginRef/index.html>. The best place for questions on this is the apple-cdsa mailing list <http://lists.apple.com/mailman/listinfo/apple-cdsa>.

Regards,

--gc

____________________________________________________________________

Garth Cummings email@hidden

Sr. Software Engineer

Apple Developer Technical Support

<http://developer.apple.com/technicalsupport>

_______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (email@hidden) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/email@hidden This email sent to email@hidden

Follow-Ups:

Re: KUNCUserNotificationCallBack
- From: Eric Long <email@hidden>

References:

>KUNCUserNotificationCallBack (From: Eric Long <email@hidden>)