weak regex/glob in listprincs in kadmin (on ldap)?
eagle at eyrie.org
Mon Jul 12 19:49:32 EDT 2021
"Chris Hecker" <checker at d6.com> writes:
> It's not clear how you'd iterate them all with the current API in a
> remotely efficient manner. Maybe people don't want to do that very
> often though.
Whenever I wanted to do something like that, I generally did it using
kadmin.local or the library equivalent on a KDC replica rather than trying
to do it over protocol.
I'm not a huge fan of the kadmin network protocol. It works, mostly, but
whenever I was doing something very complicated, I usually had better luck
writing some code that could run on a KDC against a local database (I
never used LDAP, but the same principle mostly applies) and then wrapping
my own protocol around whatever that operation wanted to return.
Russ Allbery (eagle at eyrie.org) <https://www.eyrie.org/~eagle/>
More information about the Kerberos