[Freeipa-devel] [PATCH 0195] Create indexes for krbCanonicalName attribute

Martin Babinsky mbabinsk at redhat.com
Fri Jul 22 13:43:03 UTC 2016


On 07/22/2016 02:37 PM, thierry bordaz wrote:
> Hi Martin,
>
> The patch looks good. Just a question krbPrincipalName is
> caseExactIA5Match but is also indexed caseIgnoreIA5Match.
> Do you think it would be need for krbCanonicalName as well ?
>
> thanks
> thierry
>
>
> On 07/22/2016 01:27 PM, Martin Babinsky wrote:
>> https://fedorahosted.org/freeipa/ticket/6100
>>
>>
>>
>
krbPrincipalName is indexed with caseIgnoreIA5Match because it should be 
searched for case-insensitively when canonicalization is requested.

krbCanonicalName is always searched for case-sensitively to retrieve 
correctly-cased canonical principal name.

-- 
Martin^3 Babinsky




More information about the Freeipa-devel mailing list