kdb5_util load mix-in operation

Will Fiveash William.Fiveash at sun.com
Tue Oct 17 22:43:14 EDT 2006


In order to make the krb5_ldap_put_principal() more efficient when doing
a kdb5_util load I am requiring that if the user wants krb principals to
be mixed in with existing non-krb entries then they will need to use a
-x mixin arg like so:

kdb5_util load -update -x mixin <dump-file>

and they must add the krbprincipalname attribute with principal name
value to mix-in entries prior to the load.  The user will also have to
set, prior to the load, the subtrees attribute in the realm entry such
that the mix-in entry can be found under one of the subtrees.  If a
mix-in entry is located with the matching krbprincipalname attribute
that entry is modified with the krb princ aux. attributes from the dump
record.  If a mix-in entry can not be found then a standalone krb princ
entry will be created under the realm container.

If they do not provide the -x mixin arg then all krb princ will be
created as standalone krb princ entries.  This will avoid a needless
search for the mix-in entry.
-- 
Will Fiveash
Sun Microsystems Inc.
Austin, TX, USA (TZ=CST6CDT)



More information about the krbdev mailing list