On Thu, 2012-12-06 at 15:52 +0100, Hallvard Breien Furuseth wrote:
Hanspeter Kunz writes:
I want to find all entries in my ldap directory that contain certain ou's, e.g.
ldapsearch -x "(ou:dn:=Administration)"
which returns (in my case) all entries that correspond to administrative staff. The query works but it is slow and puts a high load on the ldap server.
I wonder if I can create an index which would speed things up, but I could not figure out what I should index.
You can't.
ok, bad, but good to know.
You can index 'ou', search for each admin OU, and then issue one search request based on each returned DN. The OU filter would be something like (&(ou=Administration)(ou:dn:=Administration)) or maybe (&(ou=Administration)(objectClass=organizationalUnit)(ou:dn:=Administration)).
I was thinking about this too. I just hoped that there is an elegant solution.
actually the (ou:dn:=Administration) term is unnecessary, because this is implied by (ou=Administration).
but thanks anyhow, hp