weak regex/glob in listprincs in kadmin (on ldap)?

2021-07-11 Thread Chris Hecker
>From looking at the code in src/lib/kadm5/srv/svr_iters.c it seems like the listprincs command should support [] patterns like che[ca]* but it doesn't in my version (1.15.1 on cent

Re: weak regex/glob in listprincs in kadmin (on ldap)?

2021-07-11 Thread Greg Hudson
On 7/11/21 9:23 PM, Chris Hecker wrote: > From looking at the code in src/lib/kadm5/srv/svr_iters.c > > > it seems like the listprincs command should support [] patterns like > che[ca

Re[2]: weak regex/glob in listprincs in kadmin (on ldap)?

2021-07-11 Thread Chris Hecker
It's a bummer there's no iteration interface for get_principals because there's no way it's going to be able to return them all for any reasonably sized realm, so it'd be nice to be able to iterate as a client. I guess that complicates the db layer a lot though. It's not clear how you'd iter