i create two entry:dn: uid=real,o=test.com userPassword=xxxx ....
dn:uid=alias,o=test.com objectClass: alias objectClass: extensibleObject aliasedObjectName: uid=real,o=test.com
can i bind real entry by alias and real's userPassword ? if so, how to do?
何萍 wrote:
i create two entry: dn: uid=real,o=test.com http://test.com userPassword=xxxx ....
dn:uid=alias,o=test.com http://test.com objectClass: alias objectClass: extensibleObject aliasedObjectName: uid=real,o=test.com http://test.com
can i bind real entry by alias and real's userPassword ? if so, how to do?
No, aliases only affect Search operations, nothing else.
thanks, another question, if i have a real entry in 2,000,000 entries, how can i search all of it's aliases quickly? Do I need to create an index for the aliasedObjectName?
2009/9/30 Howard Chu hyc@symas.com
何萍 wrote:
i create two entry: dn: uid=real,o=test.com http://test.com userPassword=xxxx ....
dn:uid=alias,o=test.com http://test.com objectClass: alias objectClass: extensibleObject aliasedObjectName: uid=real,o=test.com http://test.com
can i bind real entry by alias and real's userPassword ? if so, how to do?
No, aliases only affect Search operations, nothing else.
-- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/
On 30/09/2009 05:53, 何萍 wrote:
thanks, another question, if i have a real entry in 2,000,000 entries, how can i search all of it's aliases quickly? Do I need to create an index for the aliasedObjectName?
Yes, since you would be performing a search using a filter like aliasedObjectName=uid=real,o=test.com. As a general rule, any attributes that appear in search filters should be indexed. In this case an "eq" index will be sufficient.
Jonathan
2009/9/30 Howard Chu <hyc@symas.com mailto:hyc@symas.com>
何萍 wrote: i create two entry: dn: uid=real,o=test.com <http://test.com> <http://test.com> userPassword=xxxx .... dn:uid=alias,o=test.com <http://test.com> <http://test.com> objectClass: alias objectClass: extensibleObject aliasedObjectName: uid=real,o=test.com <http://test.com> <http://test.com> can i bind real entry by alias and real's userPassword ? if so, how to do? No, aliases only affect Search operations, nothing else. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/
Jonathan Clarke wrote:
On 30/09/2009 05:53, 何萍 wrote:
thanks, another question, if i have a real entry in 2,000,000 entries, how can i search all of it's aliases quickly? Do I need to create an index for the aliasedObjectName?
Yes, since you would be performing a search using a filter like aliasedObjectName=uid=real,o=test.com. As a general rule, any attributes that appear in search filters should be indexed. In this case an "eq" index will be sufficient.
You couldn't index more than "eq" :)
p.
openldap-technical@openldap.org