[Freeipa-devel] [PATCHES 0069-0077] support for proper Kerberos principal canonicalization

[David Kupka]

On 05/10/15 16:12, Simo Sorce wrote:
> On 05/10/15 09:00, Martin Babinsky wrote:
>> These patches implement the plumbing required to properly support
>> canonicalization of Kerberos principals (
>> https://fedorahosted.org/freeipa/ticket/3864).
>>
>> Setting multiple principal aliases on hosts/services is beyond the scope
>> of this patchset and should be done after these patches are pushed.
>>
>> I will try to send some tests for the patches later this week.
>>
>> Please review the hell out of them.
>
> LGTM, I do not see any issue at quick visual inspection.
> What about the performance regression with the indexes ? Is that bug
> fixed in 389ds ?
>
> Simo.
>
>

The issue is still there. Thierry investigated this in 389 DS and IIUC 
he is not sure if it's bug or completely missing feature. Therefore we 
still don't know how much time is needed there.

-- 
David Kupka