Hi there guys.
A costumer of us were having problems with the slapd service ( unexpected hangs ), it's an ubuntu installation running slapd 2.2.26 In the logs I noticed that there were no indexes available, the index_param failed were reported in the logs, the systems uses ldap for user authentication and nothing else.
After that, I added the following in the slapd.conf,
index cn,gidNumber,memberUid,uid eq index uniqueMember eq index uidNumber eq
The performance where better and there were no more hangs, but I'm getting the following error. and the user cannot authenticate, so I went back to the original configuration without indexes.
Nov 11 12:05:06 localhost slapd[28509]: <= check a_dn_pat: cn=admin,dc=domain,dc=gub Nov 11 12:05:06 localhost slapd[28509]: <= check a_dn_pat: self Nov 11 12:05:06 localhost slapd[28509]: <= check a_dn_pat: * Nov 11 12:05:06 localhost slapd[28509]: <= acl_mask: [3] applying read(=rscx) (stop) Nov 11 12:05:06 localhost slapd[28509]: <= acl_mask: [3] mask: read(=rscx) Nov 11 12:05:06 localhost slapd[28509]: => access_allowed: search access granted by read(=rscx) Nov 11 12:05:06 localhost slapd[28509]: <= test_filter 5 Nov 11 12:05:06 localhost slapd[28509]: <= test_filter_and 5 Nov 11 12:05:06 localhost slapd[28509]: <= test_filter 5 Nov 11 12:05:06 localhost slapd[28509]: bdb_search: 114 does not match filter Nov 11 12:05:06 localhost slapd[28509]: entry_decode: "uid=user,ou=People,dc=domain,dc=gub"
Reading in the list I found that some people suggest to add more index, but, what else can I add? this is the structure.
dn: uid=user,ou=People,dc=domain,dc=gub cn:: THVjw61hIENhbGRlcw== description:: THVjw61hIENhbGRlcyAtIERJTkFFIC0gT2JzZXJ2YXRvcmlvIE0uVC4= gidNumber: 1553 homeDirectory: /home/user loginShell: /bin/bash objectClass: person objectClass: posixAccount objectClass: top sn: Name uid: user uidNumber: 1542 userPassword:: bGNhbGRlcw== structuralObjectClass: person
Thanks in advance. Best Regards.
openldap-software@openldap.org