Hello List ,
I start seeing the following error in ldap error log , DS cfg for fractional muiltimaster replication with member plugin enabled local in each host and excluded from replication . There is no index on email attribute but nsAccounlock is indexed for equality, presence and substring.
NOTICE - ldbm_back_search - Unindexed search: search base="ou=Users,ou=ds,dc=xxxx,dc=xxxx" scope=1 filter="(&(&(!(nsAccountLock=*))(!(nsAccountLock=true)))(email=xxxxxxxxxx.com))" conn=xxx op= xxx
DS version : 89-ds-base-1.3.10.2-14.el7_9.x86_64 389-ds-console-1.2.16-1.el7.noarch 389-ds-base-snmp-1.3.10.2-14.el7_9.x86_64 389-ds-base-libs-1.3.10.2-14.el7_9.x86_64
BUT same ldapsearch for a DS cfg with same index cfg returns no errors in this ldap version, please explain what's going on .
389-ds-base-libs-1.3.9.1-10.el7.x86_64 389-ds-console-1.2.16-1.el7.noarch 389-ds-base-1.3.9.1-10.el7.x86_64
Thank you Isabella
Hi Isabella,
The filter is indeed unindexed: !subfilter is always unindexed email has no index So the notice message is normal. Now the fact that you get or not an unindexed note in search result will depends on the number of descendants of ou=Users,ou=ds,dc=xxxx,dc=xxxx If the number is below the allies threshold the search is indexed by the ancestorid index.
Anyway I strongly recommend to add the email equality index because having to look at all users means degraded performance while email index will directly return a single entry ...
Regards Pierre
On Wed, Feb 2, 2022 at 8:28 PM Ghiurea, Isabella < Isabella.Ghiurea@nrc-cnrc.gc.ca> wrote:
Hello List ,
I start seeing the following error in ldap error log , DS cfg for fractional muiltimaster replication with member plugin enabled local in each host and excluded from replication . There is no index on email attribute but nsAccounlock is indexed for equality, presence and substring.
NOTICE - ldbm_back_search - Unindexed search: search base="ou=Users,ou=ds,dc=xxxx,dc=xxxx" scope=1 filter="(&(&(!(nsAccountLock=*))(!(nsAccountLock=true)))(email= xxxxxxxxxx.com))" conn=xxx op= xxx
DS version :
89-ds-base-1.3.10.2-14.el7_9.x86_64
389-ds-console-1.2.16-1.el7.noarch
389-ds-base-snmp-1.3.10.2-14.el7_9.x86_64
389-ds-base-libs-1.3.10.2-14.el7_9.x86_64
BUT same ldapsearch for a DS cfg with same index cfg returns no errors in this ldap version, please explain what’s going on .
389-ds-base-libs-1.3.9.1-10.el7.x86_64
389-ds-console-1.2.16-1.el7.noarch
389-ds-base-1.3.9.1-10.el7.x86_64
Thank you
Isabella _______________________________________________ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.... Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
389-users@lists.fedoraproject.org
-
Ghiurea, Isabella -
Pierre Rogier