r4976: Try to scare people off from trying to write authentication modules

that only acheive as much as 'security=server' does.

Andrew Bartlett

diff --git a/source/include/auth.h b/source/include/auth.h
index 188cf58643dff733a3412f3e13be244295828b0f..91751e718040e56aff1b98c7a23c57a7396d2a40 100644 (file)
--- a/source/include/auth.h
+++ b/source/include/auth.h
@@ -112,6 +112,10 @@ typedef struct auth_methods
                         const struct auth_usersupplied_info *user_info, 
                         auth_serversupplied_info **server_info);
 
+       /* If you are using this interface, then you are probably
+        * getting something wrong.  This interface is only for
+        * security=server, and makes a number of compromises to allow
+        * that.  It is not compatible with being a PDC.  */
        DATA_BLOB (*get_chal)(const struct auth_context *auth_context,
                              void **my_private_data, 
                              TALLOC_CTX *mem_ctx);