weak regex/glob in listprincs in kadmin (on ldap)?

[Russ Allbery]

"Chris Hecker" <checker at d6.com> writes:

> It's not clear how you'd iterate them all with the current API in a
> remotely efficient manner.  Maybe people don't want to do that very
> often though.

Whenever I wanted to do something like that, I generally did it using
kadmin.local or the library equivalent on a KDC replica rather than trying
to do it over protocol.

I'm not a huge fan of the kadmin network protocol.  It works, mostly, but
whenever I was doing something very complicated, I usually had better luck
writing some code that could run on a KDC against a local database (I
never used LDAP, but the same principle mostly applies) and then wrapping
my own protocol around whatever that operation wanted to return.

-- 
Russ Allbery (eagle at eyrie.org)             <https://www.eyrie.org/~eagle/>