Hi there guys.
A costumer of us were having problems with the slapd service ( unexpected hangs ), it's an ubuntu installation running slapd 2.2.26 In the logs I noticed that there were no indexes available, the index_param failed were reported in the logs, the systems uses ldap for user authentication and nothing else.
After that, I added the following in the slapd.conf,
index cn,gidNumber,memberUid,uid eq index uniqueMember eq index uidNumber eq
The performance where better and there were no more hangs, but I'm getting the following error. and the user cannot authenticate, so I went back to the original configuration without indexes.
Nov 11 12:05:06 localhost slapd[28509]: <= check a_dn_pat: cn=admin,dc=domain,dc=gub Nov 11 12:05:06 localhost slapd[28509]: <= check a_dn_pat: self Nov 11 12:05:06 localhost slapd[28509]: <= check a_dn_pat: * Nov 11 12:05:06 localhost slapd[28509]: <= acl_mask: [3] applying read(=rscx) (stop) Nov 11 12:05:06 localhost slapd[28509]: <= acl_mask: [3] mask: read(=rscx) Nov 11 12:05:06 localhost slapd[28509]: => access_allowed: search access granted by read(=rscx) Nov 11 12:05:06 localhost slapd[28509]: <= test_filter 5 Nov 11 12:05:06 localhost slapd[28509]: <= test_filter_and 5 Nov 11 12:05:06 localhost slapd[28509]: <= test_filter 5 Nov 11 12:05:06 localhost slapd[28509]: bdb_search: 114 does not match filter Nov 11 12:05:06 localhost slapd[28509]: entry_decode: "uid=user,ou=People,dc=domain,dc=gub"
Reading in the list I found that some people suggest to add more index, but, what else can I add? this is the structure.
dn: uid=user,ou=People,dc=domain,dc=gub cn:: THVjw61hIENhbGRlcw== description:: THVjw61hIENhbGRlcyAtIERJTkFFIC0gT2JzZXJ2YXRvcmlvIE0uVC4= gidNumber: 1553 homeDirectory: /home/user loginShell: /bin/bash objectClass: person objectClass: posixAccount objectClass: top sn: Name uid: user uidNumber: 1542 userPassword:: bGNhbGRlcw== structuralObjectClass: person
Thanks in advance. Best Regards.
--On Tuesday, November 11, 2008 6:12 PM -0200 Net Warrior netwarrior863@gmail.com wrote:
Hi there guys.
A costumer of us were having problems with the slapd service ( unexpected hangs ), it's an ubuntu installation running slapd 2.2.26 In the logs I noticed that there were no indexes available, the index_param failed were reported in the logs, the systems uses ldap for user authentication and nothing else.
After that, I added the following in the slapd.conf,
index cn,gidNumber,memberUid,uid eq index uniqueMember eq index uidNumber eq
The performance where better and there were no more hangs, but I'm getting the following error. and the user cannot authenticate, so I went back to the original configuration without indexes.
Did you reindex the database after you added the indices via slapindex while the server was offline, as is required when you add indices to existing objects?
And, I'll note that OpenLDAP 2.2 is very old and no longer supported. Numerous bugs have been fixed since that release, even in the OpenLDAP 2.2 series.
--Quanah
--
Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration
openldap-software@openldap.org