I'm sure this question has been asked before, but my googling has failed to find an answer:
How can I get a list of attribute indexes for our OpenLDAP instance? We're running version 2.4.57 (FreeBSD).
Thanks in advance,
Did you look into syslog ever?
My server logs things like this during startup: 67b840f4.2847ec71 0x7f4772c2edc0 index cn 0x071c 67b840f4.28480442 0x7f4772c2edc0 index displayName 0x071e 67b840f4.28481387 0x7f4772c2edc0 index entryCSN 0x0004 67b840f4.284821d4 0x7f4772c2edc0 index entryUUID 0x0004 67b840f4.2848322f 0x7f4772c2edc0 index gidNumber 0x0004 67b840f4.28484243 0x7f4772c2edc0 index givenName 0x071e 67b840f4.28485625 0x7f4772c2edc0 index ipServicePort 0x0004 67b840f4.2848676c 0x7f4772c2edc0 index ipServiceProtocol 0x0004 67b840f4.284879b1 0x7f4772c2edc0 index mail 0x0716 67b840f4.28488a59 0x7f4772c2edc0 index member 0x0004 67b840f4.28489baa 0x7f4772c2edc0 index memberUid 0x0004
Admitted this is from "-d64", because I'm hunting for configuration errors...
Apart from that, you could look up in your config files which indices you did configure.
Kind regards, Ulrich Windl
-----Original Message----- From: Richard Perini rpp@ramico.com.au Sent: Thursday, February 20, 2025 3:54 AM To: openldap-technical@openldap.org Subject: [EXT] How do I list existing indexes
I'm sure this question has been asked before, but my googling has failed to find an answer:
How can I get a list of attribute indexes for our OpenLDAP instance? We're running version 2.4.57 (FreeBSD).
Thanks in advance,
-- Richard Perini Ramico Australia Pty Ltd Sydney, Australia rpp@ramico.com.au
"The difference between theory and practice is that in theory there is no difference, but in practice there is"
--On Thursday, February 20, 2025 1:53 PM +1100 Richard Perini rpp@ramico.com.au wrote:
I'm sure this question has been asked before, but my googling has failed to find an answer:
How can I get a list of attribute indexes for our OpenLDAP instance? We're running version 2.4.57 (FreeBSD).
Indices are set in the slapd configuration, so you should look there. Either slapd.conf if you're doing the old method, or the cn=config database if you're doing the new style.
Regards, Quanah
On Fri, Feb 21, 2025 at 12:09:18PM -0800, Quanah Gibson-Mount wrote:
--On Thursday, February 20, 2025 1:53 PM +1100 Richard Perini rpp@ramico.com.au wrote:
I'm sure this question has been asked before, but my googling has failed to find an answer:
How can I get a list of attribute indexes for our OpenLDAP instance? We're running version 2.4.57 (FreeBSD).
Indices are set in the slapd configuration, so you should look there. Either slapd.conf if you're doing the old method, or the cn=config database if you're doing the new style.
Thank you for the answer, yes we are using the "new style".
I found what I was looking for with
"slapcat -b cn=config | grep olcDbIndex | sort -u"
but I'd imagine there is a more elegant way of searching :-)
Regards
-- Richard Perini Ramico Australia Pty Ltd Sydney, Australia rpp@ramico.com.au ----------------------------------------------------------------------------- "The difference between theory and practice is that in theory there is no difference, but in practice there is"
--On Sunday, February 23, 2025 9:58 AM +1100 Richard Perini rpp@ramico.com.au wrote:
On Fri, Feb 21, 2025 at 12:09:18PM -0800, Quanah Gibson-Mount wrote:
--On Thursday, February 20, 2025 1:53 PM +1100 Richard Perini rpp@ramico.com.au wrote:
I'm sure this question has been asked before, but my googling has failed to find an answer:
How can I get a list of attribute indexes for our OpenLDAP instance? We're running version 2.4.57 (FreeBSD).
Indices are set in the slapd configuration, so you should look there. Either slapd.conf if you're doing the old method, or the cn=config database if you're doing the new style.
Thank you for the answer, yes we are using the "new style".
I found what I was looking for with
"slapcat -b cn=config | grep olcDbIndex | sort -u"
but I'd imagine there is a more elegant way of searching :-)
If you've configured your system so that the cn=config database is searchable via ldapsearch, you could just... ldapsearch.
--Quanah
openldap-technical@openldap.org
-
Quanah Gibson-Mount -
Richard Perini -
Windl, Ulrich