URL:
https://github.com/freeipa/freeipa/pull/812
Title: #812: [WIP] Refactoring cert-find to use API call directly instead of using
simo5 commented:
"""
Ok one thing was in the back of my mind and came up now, we need to keep in mind that
krbprincipalname can be multivalued. It won't affect this case (I think) but if we are
going to expose some new attribute we need to make sure users of the API are not tricked
into thinking it is alays the service's unique name (that's what krbCanonicalName
is for).
"""
See the full comment at
https://github.com/freeipa/freeipa/pull/812#issuecomment-304009324