[38950] in Kerberos
Re: weak regex/glob in listprincs in kadmin (on ldap)?
daemon@ATHENA.MIT.EDU (Russ Allbery)
Mon Jul 12 19:51:57 2021
From: Russ Allbery <eagle@eyrie.org>
To: Chris Hecker <checker@d6.com>
In-Reply-To: <em8fecab8b-09fb-4a21-ad29-150e8102779f@checker-blade15> (Chris
Hecker's message of "Mon, 12 Jul 2021 06:52:54 +0000")
Date: Mon, 12 Jul 2021 16:49:32 -0700
Message-ID: <87lf6bum7n.fsf@hope.eyrie.org>
MIME-Version: 1.0
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
"Chris Hecker" <checker@d6.com> writes:
> It's not clear how you'd iterate them all with the current API in a
> remotely efficient manner. Maybe people don't want to do that very
> often though.
Whenever I wanted to do something like that, I generally did it using
kadmin.local or the library equivalent on a KDC replica rather than trying
to do it over protocol.
I'm not a huge fan of the kadmin network protocol. It works, mostly, but
whenever I was doing something very complicated, I usually had better luck
writing some code that could run on a KDC against a local database (I
never used LDAP, but the same principle mostly applies) and then wrapping
my own protocol around whatever that operation wanted to return.
--
Russ Allbery (eagle@eyrie.org) <https://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
