ldap backend - krbPrincipalName substring search

[Brandon Allbery]

On Thu, 2015-04-02 at 16:37 -0700, Paul B. Henson wrote:
> Does the ldap backend need a substring index on krbPrincipalName in
> addition to the equality index? What kdc or kadmin operation might
> result in a substring search?

Two operations come to mind, both kadmin requests: listprincs and ktadd
(with -glob) both allow glob wildcards.

-- 
brandon s allbery kf8nh                           sine nomine associates
allbery.b at gmail.com                              ballbery at sinenomine.net
unix openafs kerberos infrastructure xmonad        http://sinenomine.net