Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
X-Mailer: MIME-tools 5.427 (Entity 5.427)
RT-Send-CC:
X-RT-Original-Encoding: iso-8859-1
Content-Length: 545

[michael@stroeder.com - Sat Feb 21 11:36:36 2015]:
> The change should not have any negative impact because substring search does
> not work at all when using SUBSTR caseExactSubstringsMatch with a IA5String
> syntax.

I am unable to corroborate this assertion.  With the current schema and OpenLDAP 2.4.31, I 
can do something like "getprincs k*" and it appears to work, with or without an index for 
krbPrincipalName.  This query involves a search filter of:
  (&(|(objectClass=krbPrincipalAux)(objectClass=krbPrincipal))(krbPrincipalName=k*))