On Thu, 2015-04-02 at 16:37 -0700, Paul B. Henson wrote: > Does the ldap backend need a substring index on krbPrincipalName in > addition to the equality index? What kdc or kadmin operation might > result in a substring search?
Two operations come to mind, both kadmin requests: listprincs and ktadd (with -glob) both allow glob wildcards. -- brandon s allbery kf8nh sine nomine associates allber...@gmail.com ballb...@sinenomine.net unix openafs kerberos infrastructure xmonad http://sinenomine.net ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos