URL: https://github.com/freeipa/freeipa/pull/5157 Author: tiran Title: #5157: Use single update LDIF for indices and add more indices Action: opened
PR body: """ ## Use single update LDIF for indices
Index definitions were split across four files. indices.ldif contained the initial subset of indices. Three update files partly duplicated the indices and partly added new indices.
All indices are now defined in a single update file that is sorted alphanumerically.
The changeset avoids two additional index tasks and reduces installation time by 5 to 10 seconds.
## Add more indices
ipaCASubjectDN is used by lightweight sub CA feature.
ipaExternalMember is used by ipasam code to assemble MS-PAC records.
ipaNTSecurityIdentifier was only index for "pres" and was missing an index on "eq". Samba performs queries with SID string.
memberPrincipal is used by S4U2Proxy constrained delegation and by ipa-custodia.
Also note that dnaHostname, ipServiceProtocol, ipaCertSubject, and ipaKeyUsage are currently not index because an index would rarely used or have a poor selectivity.
Fixes: https://pagure.io/freeipa/issue/8493 """
To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5157/head:pr5157 git checkout pr5157