Hi,

I've got a question that seems pretty trivial to me so it feels like I'm missing something obvious.

I know that there are different provider types: id, auth, chpass, access (and maybe others)

But what I don't quite understand is what they actually do.
The documentation says:

id -> "The identification provider"
auth -> "The authentication provider"
access -> "The access control provider"
chpass -> "The provider which should handle change password operations for the domain."

(The first three are not very helpful ;-) )
I understand chpass and I can make a guess about the others but I'm not sure:

id: Just returns information about some object
auth: Validates credentials for an object
access: Checks authorization?

But I'm very vague on the details. Is there any more information I can refer to? What are the differences/can anyone point me at an API description or some other documentation?

One very specific question for example: What does the krb5 auth mean? Does it retrieve a ticket and try to decrypt that?

Thank you!

Cheers,
Lars