"Chris Hecker" <chec...@d6.com> writes: > It's not clear how you'd iterate them all with the current API in a > remotely efficient manner. Maybe people don't want to do that very > often though.
Whenever I wanted to do something like that, I generally did it using kadmin.local or the library equivalent on a KDC replica rather than trying to do it over protocol. I'm not a huge fan of the kadmin network protocol. It works, mostly, but whenever I was doing something very complicated, I usually had better luck writing some code that could run on a KDC against a local database (I never used LDAP, but the same principle mostly applies) and then wrapping my own protocol around whatever that operation wanted to return. -- Russ Allbery (ea...@eyrie.org) <https://www.eyrie.org/~eagle/> ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
