[Freeipa-devel] [PATCH 0195] Create indexes for krbCanonicalName attribute

thierry bordaz tbordaz at redhat.com
Wed Jul 27 16:26:43 UTC 2016



On 07/22/2016 03:43 PM, Martin Babinsky wrote:
> On 07/22/2016 02:37 PM, thierry bordaz wrote:
>> Hi Martin,
>>
>> The patch looks good. Just a question krbPrincipalName is
>> caseExactIA5Match but is also indexed caseIgnoreIA5Match.
>> Do you think it would be need for krbCanonicalName as well ?
>>
>> thanks
>> thierry
>>
>>
>> On 07/22/2016 01:27 PM, Martin Babinsky wrote:
>>> https://fedorahosted.org/freeipa/ticket/6100
>>>
>>>
>>>
>>
> krbPrincipalName is indexed with caseIgnoreIA5Match because it should 
> be searched for case-insensitively when canonicalization is requested.
>
> krbCanonicalName is always searched for case-sensitively to retrieve 
> correctly-cased canonical principal name.
>

Hi martin,

The patch is working fine and user-add on top of 50K users gives a 
response time of 3.5s.
the index is correctly updated.

ACK

thanks
thierry




More information about the Freeipa-devel mailing list