kdb5_util load mix-in operation

[Will Fiveash]

On Thu, Oct 19, 2006 at 04:40:49PM -0400, Sam Hartman wrote:
> Have you considered the performance without this optimization and
> confirmed it would be problematic?
> 
> This seems significant complexity to add if not required.

The code does a search for each subtree set in the realm container
object to find any entries containing the matching krbprincipalname
attribute.  Nico was just expressing the same opinion and I can see your
point.  I could eliminate the -x mixin arg easily and mixin would be the
default behavior when doing a kdb5_util load.  If you are okay with that
I'll make that change which will make the code somewhat simpler (it was
a pain getting that arg to krb5_ldap_put_principal().

-- 
Will Fiveash
Sun Microsystems Inc.
Austin, TX, USA (TZ=CST6CDT)