From wyllys@sac.sfbay.sun.com Tue Jan 20 13:33:07 2009 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n0KLX69S011083 for ; Tue, 20 Jan 2009 13:33:07 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id n0KLX53o026191; Tue, 20 Jan 2009 14:33:06 -0700 (MST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KDS0032TH742F00@brm-avmta-1.central.sun.com>; Tue, 20 Jan 2009 14:33:04 -0700 (MST) Received: from dm-sfbay-01.sfbay.sun.com ([129.145.155.118]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KDS006GOH74LRE0@brm-avmta-1.central.sun.com>; Tue, 20 Jan 2009 14:33:04 -0700 (MST) Received: from sac.sfbay.sun.com (new-sac.SFBay.Sun.COM [129.146.175.65]) by dm-sfbay-01.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id n0KLX3Zw047165; Tue, 20 Jan 2009 13:33:03 -0800 (PST) Received: from sac.sfbay.sun.com (localhost [127.0.0.1]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n0KLX2V5011078; Tue, 20 Jan 2009 13:33:02 -0800 (PST) Received: (from wyllys@localhost) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8/Submit) id n0KLX2EN011074; Tue, 20 Jan 2009 13:33:02 -0800 (PST) Date: Tue, 20 Jan 2009 13:33:02 -0800 (PST) From: Wyllys Ingersoll Subject: non-interactive destroy for kdb5_util [PSARC/2009/038 FastTrack timeout 01/28/2009] To: PSARC-ext@sun.com Cc: kerberos-discuss@opensolaris.org Message-id: <200901202133.n0KLX2EN011074@sac.sfbay.sun.com> Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 Status: RO Content-Length: 3643 Template Version: @(#)sac_nextcase %I% %G% SMI This information is Copyright 2009 Sun Microsystems 1. Introduction 1.1. Project/Component Working Name: non-interactive destroy for kdb5_util 1.2. Name of Document Author/Supplier: Author: Mark Phalan 1.3 Date of This Document: 20 January, 2009 4. Technical Description Project: Non-interactive destroy for kdb5_util Submitter: Mark Phalan Binding: Patch ABSTRACT -------- This proposal adds support for an option to kdb5_util(1M) which allows a Kerberos policy and principal database to be destroyed without an interactive prompt for confirmation and adds a new global option to specify a stash file. This is useful when scripting kdb5_util(1M). After the changes outlined below are made kdb5_util will have better command-line compatibility with MIT Kerberos' kdb5_util. BACKGROUND ---------- MIT's kdb5_util uses the "-f" option for the "destroy" sub-command to indicate that the Kerberos policy and principal database should be destroyed without user interaction. It uses the "-sf" option as a global option to specify a stash file. Solaris's kdb5_util has no way to specify that the database should be destroyed non-interactively and uses the "-f" option as a global option to specify a stash-file (-sf is also implemented but not documented). Both the functionality provided by the option to non-interactively destroy a Kerberos database and the compatibility with MIT Kerberos are important for Solaris Kerberos. PROPOSAL -------- - New global CLI argument to indicate stash file - "-sf". - Change current meaning of "-f" to indicate non-interactive destroy. Patch binding is requested to allow these options to be backported to S10. However there are no current plans to do so at this time. Example: To non-interactively destroy a Kerberos database # kdb5_util destroy -f ** Database '/var/krb5/principal' destroyed. # DOCUMENTATION ------------- --- kdb5_util.orig Fri Jan 2 14:05:53 2009 +++ kdb5_util.new Fri Jan 2 14:19:50 2009 @@ -9,7 +9,7 @@ kdb5_util - Kerberos Database maintenance utility SYNOPSIS - /usr/sbin/kdb5_util [-d dbname] [-f stashfile_name] + /usr/sbin/kdb5_util [-d dbname] [-sf stashfile_name] [-k mkeytype] [-m ] [-M mkeyname] [-P password] [-r realm] [-x db_args]... cmd @@ -31,7 +31,7 @@ name is /var/krb5/principal. - -f stashfile_name + -sf stashfile_name Specify the stash file name. You can specify an absolute path. @@ -142,21 +142,22 @@ Creates the database specified by the -d option. You will be prompted for the database master password. If you specify -s, a stash file is created as speci- - fied by the -f option. If you did not specify -f, + fied by the -sf option. If you did not specify -sf, the default stash file name is /var/krb5/.k5.realm. - If you use the -f, -k, or -M options when you create + If you use the -sf, -k, or -M options when you create a database, then you must use the same options when modifying or destroying the database. - destroy + destroy [-f] - Destroys the database specified by the -d option. + Destroys the database specified by the -d option. With + the -f argument, does not prompt the user. 6. Resources and Schedule 6.4. Steering Committee requested information 6.4.1. Consolidation C-team Name: ON 6.5. ARC review type: FastTrack 6.6. ARC Exposure: open From Darren.Moffat@sun.com Wed Jan 21 02:36:25 2009 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n0LAaP4t015145 for ; Wed, 21 Jan 2009 02:36:25 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id n0LAaOQ0058861 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Wed, 21 Jan 2009 03:36:25 -0700 (MST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KDT00507HGOLG00@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 21 Jan 2009 02:36:24 -0800 (PST) Received: from gmp-eb-inf-2.sun.com ([192.18.6.24]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KDT00A5MHGNH090@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 21 Jan 2009 02:36:24 -0800 (PST) Received: from fe-emea-09.sun.com (gmp-eb-lb-2-fe3.eu.sun.com [192.18.6.12]) by gmp-eb-inf-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id n0LAaMFb025280 for ; Wed, 21 Jan 2009 10:36:22 +0000 (GMT) Received: from conversion-daemon.fe-emea-09.sun.com by fe-emea-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0KDT00201FXDYD00@fe-emea-09.sun.com> (original mail from Darren.Moffat@Sun.COM) for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 21 Jan 2009 10:36:22 +0000 (GMT) Received: from [192.168.1.106] (cpc1-rdng3-0-0-cust433.winn.cable.ntl.com [81.110.245.178]) by fe-emea-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0KDT000LWHGCJQ60@fe-emea-09.sun.com>; Wed, 21 Jan 2009 10:36:12 +0000 (GMT) Date: Wed, 21 Jan 2009 10:36:13 +0000 From: Darren J Moffat Subject: Re: non-interactive destroy for kdb5_util [PSARC/2009/038 FastTrack timeout 01/28/2009] In-reply-to: <200901202133.n0KLX2EN011074@sac.sfbay.sun.com> Sender: Darren.Moffat@sun.com To: Wyllys Ingersoll Cc: PSARC-ext@sun.com, kerberos-discuss@opensolaris.org Message-id: <4976FA9D.5080209@Sun.COM> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200901202133.n0KLX2EN011074@sac.sfbay.sun.com> User-Agent: Thunderbird 2.0.0.17 (X11/20081023) Status: RO Content-Length: 2925 Wyllys Ingersoll wrote: > Template Version: @(#)sac_nextcase %I% %G% SMI > This information is Copyright 2009 Sun Microsystems > 1. Introduction > 1.1. Project/Component Working Name: > non-interactive destroy for kdb5_util > 1.2. Name of Document Author/Supplier: > Author: Mark Phalan > 1.3 Date of This Document: > 20 January, 2009 > 4. Technical Description > > Project: Non-interactive destroy for kdb5_util > Submitter: Mark Phalan > Binding: Patch > > ABSTRACT > -------- > > This proposal adds support for an option to kdb5_util(1M) which allows a > Kerberos policy and principal database to be destroyed without an > interactive prompt for confirmation and adds a new global option to > specify a stash file. This is useful when scripting kdb5_util(1M). After > the changes outlined below are made kdb5_util will have better > command-line compatibility with MIT Kerberos' kdb5_util. > > > BACKGROUND > ---------- > > MIT's kdb5_util uses the "-f" option for the "destroy" sub-command to > indicate that the Kerberos policy and principal database should be > destroyed without user interaction. It uses the "-sf" option as a global > option to specify a stash file. Solaris's kdb5_util has no way to > specify that the database should be destroyed non-interactively and uses > the "-f" option as a global option to specify a stash-file (-sf is also > implemented but not documented). > Both the functionality provided by the option to non-interactively > destroy a Kerberos database and the compatibility with MIT Kerberos are > important for Solaris Kerberos. > > > PROPOSAL > -------- > > - New global CLI argument to indicate stash file - "-sf". > - Change current meaning of "-f" to indicate non-interactive > destroy. > > > Patch binding is requested to allow these options to be backported to > S10. However there are no current plans to do so at this time. You have an interface change that I don't believe is backwards compatible yet you are requesting patch binding. Please justify why this change in meaning for 'destroy -f' will be acceptable and won't cause problems. > SYNOPSIS > - /usr/sbin/kdb5_util [-d dbname] [-f stashfile_name] > + /usr/sbin/kdb5_util [-d dbname] [-sf stashfile_name] > [-k mkeytype] [-m ] [-M mkeyname] [-P password] [-r realm] > [-x db_args]... cmd I very very very stronly disagree with this synopsis change. The use of a two letter option name is not acceptable and is against the CLIP guidelines. However if this is what MIT Kerberos uses and kdb5_util is otherwise compatible CLI syntax with the MIT version then I grudgingly hold my nose and let this go. However please communicate to the upstream community that a single dash with multiple option letters after it is undesireable as it is confusing to many users, eg is '-sf' one option or is it equivalent to '-s -f'. -- Darren J Moffat From Mark.Phalan@sun.com Wed Jan 21 04:11:22 2009 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca.SFBay.Sun.COM [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n0LCBMIW018343 for ; Wed, 21 Jan 2009 04:11:22 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail2sca.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id n0LCBLJh019132 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Wed, 21 Jan 2009 04:11:22 -0800 (PST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KDT00H05LUXYJ00@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@Sun.COM); Wed, 21 Jan 2009 04:11:21 -0800 (PST) Received: from gmp-eb-inf-2.sun.com ([192.18.6.24]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KDT00B9WLUVKDE0@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@Sun.COM); Wed, 21 Jan 2009 04:11:20 -0800 (PST) Received: from fe-emea-10.sun.com (gmp-eb-lb-2-fe3.eu.sun.com [192.18.6.12]) by gmp-eb-inf-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id n0LCBIt2010102 for ; Wed, 21 Jan 2009 12:11:18 +0000 (GMT) Received: from conversion-daemon.fe-emea-10.sun.com by fe-emea-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0KDT00G01L9PV700@fe-emea-10.sun.com> (original mail from Mark.Phalan@Sun.COM) for PSARC-ext@Sun.COM (ORCPT PSARC-ext@Sun.COM); Wed, 21 Jan 2009 12:11:18 +0000 (GMT) Received: from [129.157.71.112] by fe-emea-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0KDT00FZ3LUS7D50@fe-emea-10.sun.com>; Wed, 21 Jan 2009 12:11:17 +0000 (GMT) Date: Wed, 21 Jan 2009 13:10:27 +0100 From: Mark Phalan Subject: Re: [kerberos-discuss] non-interactive destroy for kdb5_util [PSARC/2009/038 FastTrack timeout 01/28/2009] In-reply-to: <4976FA9D.5080209@Sun.COM> Sender: Mark.Phalan@sun.com To: Darren J Moffat Cc: Wyllys Ingersoll , PSARC-ext@sun.com, kerberos-discuss@opensolaris.org Message-id: <1232539827.23782.13.camel@zup> MIME-version: 1.0 X-Mailer: Evolution 2.24.2 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200901202133.n0KLX2EN011074@sac.sfbay.sun.com> <4976FA9D.5080209@Sun.COM> Status: RO Content-Length: 3570 On Wed, 2009-01-21 at 10:36 +0000, Darren J Moffat wrote: > Wyllys Ingersoll wrote: > > Template Version: @(#)sac_nextcase %I% %G% SMI > > This information is Copyright 2009 Sun Microsystems > > 1. Introduction > > 1.1. Project/Component Working Name: > > non-interactive destroy for kdb5_util > > 1.2. Name of Document Author/Supplier: > > Author: Mark Phalan > > 1.3 Date of This Document: > > 20 January, 2009 > > 4. Technical Description > > > > Project: Non-interactive destroy for kdb5_util > > Submitter: Mark Phalan > > Binding: Patch > > > > ABSTRACT > > -------- > > > > This proposal adds support for an option to kdb5_util(1M) which allows a > > Kerberos policy and principal database to be destroyed without an > > interactive prompt for confirmation and adds a new global option to > > specify a stash file. This is useful when scripting kdb5_util(1M). After > > the changes outlined below are made kdb5_util will have better > > command-line compatibility with MIT Kerberos' kdb5_util. > > > > > > BACKGROUND > > ---------- > > > > MIT's kdb5_util uses the "-f" option for the "destroy" sub-command to > > indicate that the Kerberos policy and principal database should be > > destroyed without user interaction. It uses the "-sf" option as a global > > option to specify a stash file. Solaris's kdb5_util has no way to > > specify that the database should be destroyed non-interactively and uses > > the "-f" option as a global option to specify a stash-file (-sf is also > > implemented but not documented). > > Both the functionality provided by the option to non-interactively > > destroy a Kerberos database and the compatibility with MIT Kerberos are > > important for Solaris Kerberos. > > > > > > PROPOSAL > > -------- > > > > - New global CLI argument to indicate stash file - "-sf". > > - Change current meaning of "-f" to indicate non-interactive > > destroy. > > > > > > Patch binding is requested to allow these options to be backported to > > S10. However there are no current plans to do so at this time. > > You have an interface change that I don't believe is backwards > compatible yet you are requesting patch binding. Please justify why > this change in meaning for 'destroy -f' will be acceptable and won't > cause problems. Let me discuss this with the rest of the i-team. We may drop the patch binding request. > > > SYNOPSIS > > - /usr/sbin/kdb5_util [-d dbname] [-f stashfile_name] > > + /usr/sbin/kdb5_util [-d dbname] [-sf stashfile_name] > > [-k mkeytype] [-m ] [-M mkeyname] [-P password] [-r realm] > > [-x db_args]... cmd > > I very very very stronly disagree with this synopsis change. > > The use of a two letter option name is not acceptable and is against the > CLIP guidelines. > Unfortunately kdb5_util has supported two letter (and greater) options for a long time. For e.g. kdb5_util dump -old kdb5_util dump -ov ... > However if this is what MIT Kerberos uses and kdb5_util is otherwise > compatible CLI syntax with the MIT version then I grudgingly hold my > nose and let this go. This is what MIT uses and compatibility is certainly a goal. > However please communicate to the upstream > community that a single dash with multiple option letters after it is > undesireable as it is confusing to many users, eg is '-sf' one option or > is it equivalent to '-s -f'. I agree it is confusing and will try to work with the upstream community to ensure that these sorts of interfaces don't appear in the future. Thanks, -M From Mark.Phalan@sun.com Fri Jan 30 04:04:54 2009 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n0UC4suU008343 for ; Fri, 30 Jan 2009 04:04:54 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id n0UC4rpr022112 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Fri, 30 Jan 2009 04:04:54 -0800 (PST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KEA001039K6H600@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Fri, 30 Jan 2009 04:04:54 -0800 (PST) Received: from gmp-eb-inf-1.sun.com ([192.18.6.21]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KEA009IX9K5ZJ70@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Fri, 30 Jan 2009 04:04:53 -0800 (PST) Received: from fe-emea-10.sun.com (gmp-eb-lb-1-fe3.eu.sun.com [192.18.6.10]) by gmp-eb-inf-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id n0UC4qwj020129 for ; Fri, 30 Jan 2009 12:04:52 +0000 (GMT) Received: from conversion-daemon.fe-emea-10.sun.com by fe-emea-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0KEA006018NTG100@fe-emea-10.sun.com> (original mail from Mark.Phalan@Sun.COM) for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Fri, 30 Jan 2009 12:04:52 +0000 (GMT) Received: from [129.157.71.112] by fe-emea-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0KEA00J4L9JRD450@fe-emea-10.sun.com>; Fri, 30 Jan 2009 12:04:40 +0000 (GMT) Date: Fri, 30 Jan 2009 13:03:42 +0100 From: Mark Phalan Subject: Re: [kerberos-discuss] non-interactive destroy for kdb5_util [PSARC/2009/038 FastTrack timeout 01/28/2009] In-reply-to: <1232539827.23782.13.camel@zup> Sender: Mark.Phalan@sun.com To: Darren J Moffat Cc: Wyllys Ingersoll , kerberos-discuss@opensolaris.org, PSARC-ext@sun.com Message-id: <1233317022.2126.433.camel@zup> MIME-version: 1.0 X-Mailer: Evolution 2.24.2 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200901202133.n0KLX2EN011074@sac.sfbay.sun.com> <4976FA9D.5080209@Sun.COM> <1232539827.23782.13.camel@zup> Status: RO Content-Length: 2849 On Wed, 2009-01-21 at 13:10 +0100, Mark Phalan wrote: > On Wed, 2009-01-21 at 10:36 +0000, Darren J Moffat wrote: > > Wyllys Ingersoll wrote: > > > Template Version: @(#)sac_nextcase %I% %G% SMI > > > This information is Copyright 2009 Sun Microsystems > > > 1. Introduction > > > 1.1. Project/Component Working Name: > > > non-interactive destroy for kdb5_util > > > 1.2. Name of Document Author/Supplier: > > > Author: Mark Phalan > > > 1.3 Date of This Document: > > > 20 January, 2009 > > > 4. Technical Description > > > > > > Project: Non-interactive destroy for kdb5_util > > > Submitter: Mark Phalan > > > Binding: Patch > > > > > > ABSTRACT > > > -------- > > > > > > This proposal adds support for an option to kdb5_util(1M) which allows a > > > Kerberos policy and principal database to be destroyed without an > > > interactive prompt for confirmation and adds a new global option to > > > specify a stash file. This is useful when scripting kdb5_util(1M). After > > > the changes outlined below are made kdb5_util will have better > > > command-line compatibility with MIT Kerberos' kdb5_util. > > > > > > > > > BACKGROUND > > > ---------- > > > > > > MIT's kdb5_util uses the "-f" option for the "destroy" sub-command to > > > indicate that the Kerberos policy and principal database should be > > > destroyed without user interaction. It uses the "-sf" option as a global > > > option to specify a stash file. Solaris's kdb5_util has no way to > > > specify that the database should be destroyed non-interactively and uses > > > the "-f" option as a global option to specify a stash-file (-sf is also > > > implemented but not documented). > > > Both the functionality provided by the option to non-interactively > > > destroy a Kerberos database and the compatibility with MIT Kerberos are > > > important for Solaris Kerberos. > > > > > > > > > PROPOSAL > > > -------- > > > > > > - New global CLI argument to indicate stash file - "-sf". > > > - Change current meaning of "-f" to indicate non-interactive > > > destroy. > > > > > > > > > Patch binding is requested to allow these options to be backported to > > > S10. However there are no current plans to do so at this time. > > > > You have an interface change that I don't believe is backwards > > compatible yet you are requesting patch binding. Please justify why > > this change in meaning for 'destroy -f' will be acceptable and won't > > cause problems. > > Let me discuss this with the rest of the i-team. We may drop the patch > binding request. After some discussions we've decided that the best way forward is to replace the proposed "-f" option with an alternative which will be backwards compatible with S10. The plan is to discuss this with MIT. I'll send an update to this PSARC case once that has been finalized. -M