[36880] in Kerberos
Re: ldap backend - krbPrincipalName substring search
daemon@ATHENA.MIT.EDU (Brandon Allbery)
Thu Apr 2 20:02:23 2015
From: Brandon Allbery <ballbery@sinenomine.net>
To: "kerberos@mit.edu" <kerberos@mit.edu>
Date: Fri, 3 Apr 2015 00:01:52 +0000
Message-ID: <1428019312.3701.1.camel@vikktakkht>
In-Reply-To: <20150402233723.GI4951@bender.unx.csupomona.edu>
Content-Language: en-US
Content-ID: <4BC2A10E3EE61141871157CAF5C28372@mex05.mlsrvr.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Thu, 2015-04-02 at 16:37 -0700, Paul B. Henson wrote:
> Does the ldap backend need a substring index on krbPrincipalName in
> addition to the equality index? What kdc or kadmin operation might
> result in a substring search?
Two operations come to mind, both kadmin requests: listprincs and ktadd
(with -glob) both allow glob wildcards.
--
brandon s allbery kf8nh sine nomine associates
allbery.b@gmail.com ballbery@sinenomine.net
unix openafs kerberos infrastructure xmonad http://sinenomine.net
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
