<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 10/06/2015 07:19 AM, David Kupka
wrote:<br>
</div>
<blockquote cite="mid:561359CF.7060909@redhat.com" type="cite">On
05/10/15 16:12, Simo Sorce wrote:
<br>
<blockquote type="cite">On 05/10/15 09:00, Martin Babinsky wrote:
<br>
<blockquote type="cite">These patches implement the plumbing
required to properly support
<br>
canonicalization of Kerberos principals (
<br>
<a class="moz-txt-link-freetext" href="https://fedorahosted.org/freeipa/ticket/3864">https://fedorahosted.org/freeipa/ticket/3864</a>).
<br>
<br>
Setting multiple principal aliases on hosts/services is beyond
the scope
<br>
of this patchset and should be done after these patches are
pushed.
<br>
<br>
I will try to send some tests for the patches later this week.
<br>
<br>
Please review the hell out of them.
<br>
</blockquote>
<br>
LGTM, I do not see any issue at quick visual inspection.
<br>
What about the performance regression with the indexes ? Is that
bug
<br>
fixed in 389ds ?
<br>
<br>
Simo.
<br>
<br>
<br>
</blockquote>
<br>
The issue is still there. Thierry investigated this in 389 DS and
IIUC he is not sure if it's bug or completely missing feature.
Therefore we still don't know how much time is needed there.
<br>
<br>
</blockquote>
<font face="Times New Roman, Times, serif">Hi,<br>
that is correct.<br>
I can reproduce the problem. Although the matching rule (in my
test caseIgnoreIA5Match) is found, it has no registered indexing
function, so the setting (nsMatchingRule) is ignored.<br>
I do not know if the indexing function is missing or there is a
bug so that the matching rule "forget" to register it.<br>
This feature is documented but I can not find any QA test around
it, so I do not know yet if it is a regression or if it was not
enabled at all.<br>
<br>
I do not expect rapid progress on it. How urgent is it ? 7.3 ?<br>
For the moment I can think to only two workarounds:<br>
</font>
<ul>
<li><font face="Times New Roman, Times, serif">use filtered matching
rule (preferred)<br>
</font></li>
<li><font face="Times New Roman, Times, serif">change the
attribute syntax/matching rule, in the schema (I would
discourage this one because changing the schema is risky)</font></li>
</ul>
<font face="Times New Roman, Times, serif">thanks<br>
thierry <br>
</font>
</body>
</html>