LDAP searches for Kerberos entries

Michael Ströder michael at stroeder.com
Wed Feb 4 06:24:46 EST 2015


HI!

Maybe some of you are using MIT Kerberos with LDAP backend.

For creating a decent web2ldap search form template for the Kerberos schema
I'd like to know which kind of searches you usually do when looking into your
backend via LDAP.

Which attributes are you usually using in the search?
Which filters do you hack on command-line?

Well, 'krbPrincipalName' will of course be the most used search attribute. The
default equality matching rule is caseExactIA5Match, so for convenience I'd
add something to use caseIgnoreIA5Match without the user having to select that
himself.

Ciao, Michael.


More information about the Kerberos mailing list