ldap backend - krbPrincipalName substring search
Brandon Allbery
ballbery at sinenomine.net
Thu Apr 2 20:01:52 EDT 2015
On Thu, 2015-04-02 at 16:37 -0700, Paul B. Henson wrote:
> Does the ldap backend need a substring index on krbPrincipalName in
> addition to the equality index? What kdc or kadmin operation might
> result in a substring search?
Two operations come to mind, both kadmin requests: listprincs and ktadd
(with -glob) both allow glob wildcards.
--
brandon s allbery kf8nh sine nomine associates
allbery.b at gmail.com ballbery at sinenomine.net
unix openafs kerberos infrastructure xmonad http://sinenomine.net
More information about the Kerberos
mailing list