[krbdev.mit.edu #8150] SUBSTR caseExactSubstringsMatch in kerberos.schema

[Greg Hudson via RT]

[michael at stroeder.com - Sat Feb 21 11:36:36 2015]:
> The change should not have any negative impact because substring search does
> not work at all when using SUBSTR caseExactSubstringsMatch with a IA5String
> syntax.

I am unable to corroborate this assertion.  With the current schema and OpenLDAP 2.4.31, I 
can do something like "getprincs k*" and it appears to work, with or without an index for 
krbPrincipalName.  This query involves a search filter of:
  (&(|(objectClass=krbPrincipalAux)(objectClass=krbPrincipal))(krbPrincipalName=k*))