Hi @All,
i'am currently searching for a possibility to add an index in openldap (cn=config backend) for the "member" of groups.
In my log i got the following message:
475 admin slapd: <= bdb_equality_candidates: (member) not indexed
I found, that "member" is an attribute from an ldap group.
# Entry 1: cn=bind_users,ou=admins,ou=groups,dc=company,dc=de dn: cn=bind_users,ou=admins,ou=groups,dc=company,dc=de cn: bind_users member: cn=apachebind,ou=apache_technical,ou=users,dc=company,dc=de member: cn=wordpressbind1,ou=wordpress_bind,ou=users,dc=company,dc=de objectclass: groupOfNames objectclass: top
How could i add an index for this attribute?
I searched with google and found:
http://www.openldap.org/faq/data/cache/136.html https://wiki.debian.org/LDAP/OpenLDAPSetup http://www.openldap.org/doc/admin24/slapdconf2.html and so on...
With this information i already added indices for
# Entry 1: olcDatabase={1}hdb,cn=config dn: olcDatabase={1}hdb,cn=config objectclass: olcDatabaseConfig objectclass: olcHdbConfig olcdbindex: objectClass eq olcdbindex: cn pres,sub,eq olcdbindex: sn pres,sub,eq olcdbindex: uid pres,sub,eq olcdbindex: displayName pres,sub,eq olcdbindex: default sub olcdbindex: uidNumber eq olcdbindex: gidNumber eq olcdbindex: mail,givenName eq,subinitial olcdbindex: dc eq
If i try to add a new index "olcdbindex: member pres,sub,eq"
i got an failure
Could not perform ldap_modify operation. LDAP said: Other (e.g., implementation specific) error Error number: 0x50 (LDAP_OTHER)
Is anyone able to give me a hint, where i could find more information or help me to find the right search key words?