Petr Vobornik
4364ac08c5
the old implementation tried to get all entries which are member of group. That means also user. User can't have any members therefore this costly processing was unnecessary. New implementation reduces the search only to entries which have members. Also page size was removed to avoid paging by small pages(default size: 100) which is very slow for many members. https://fedorahosted.org/freeipa/ticket/4947 Reviewed-By: Jan Cholasta <jcholast@redhat.com>
153 lines
4.7 KiB
Plaintext
153 lines
4.7 KiB
Plaintext
#
|
|
# Some nss_ldap implementations will always ask for memberuid so we must
|
|
# have an index for it.
|
|
#
|
|
# FreeIPA frequently searches for memberHost and memberUser to determine
|
|
# group membership.
|
|
#
|
|
dn: cn=memberuid,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
default:cn: memberuid
|
|
default:ObjectClass: top
|
|
default:ObjectClass: nsIndex
|
|
default:nsSystemIndex: false
|
|
default:nsIndexType: eq,pres
|
|
|
|
dn: cn=memberHost,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
default:cn: memberHost
|
|
default:ObjectClass: top
|
|
default:ObjectClass: nsIndex
|
|
default:nsSystemIndex: false
|
|
only:nsIndexType: eq,pres,sub
|
|
|
|
dn: cn=memberUser,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
default:cn: memberUser
|
|
default:ObjectClass: top
|
|
default:ObjectClass: nsIndex
|
|
default:nsSystemIndex: false
|
|
only:nsIndexType: eq,pres,sub
|
|
|
|
dn: cn=member,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
only:nsIndexType: eq,pres,sub
|
|
|
|
dn: cn=uniquemember,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
only:nsIndexType: eq,sub
|
|
|
|
dn: cn=owner,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
only:nsIndexType: eq,sub
|
|
|
|
dn: cn=manager,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
only:nsIndexType: eq,pres,sub
|
|
|
|
dn: cn=secretary,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
only:nsIndexType: eq,pres,sub
|
|
|
|
dn: cn=seealso,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
only:nsIndexType: eq,sub
|
|
|
|
dn: cn=memberof,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
default:cn: memberof
|
|
default:ObjectClass: top
|
|
default:ObjectClass: nsIndex
|
|
default:nsSystemIndex: false
|
|
default:nsIndexType: eq
|
|
|
|
dn: cn=fqdn,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
default:cn: fqdn
|
|
default:ObjectClass: top
|
|
default:ObjectClass: nsIndex
|
|
default:nsSystemIndex: false
|
|
default:nsIndexType: eq
|
|
default:nsIndexType: pres
|
|
|
|
dn: cn=macAddress,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
default:cn: macAddress
|
|
default:ObjectClass: top
|
|
default:ObjectClass: nsIndex
|
|
default:nsSystemIndex: false
|
|
default:nsIndexType: eq
|
|
default:nsIndexType: pres
|
|
|
|
dn: cn=sourcehost,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
default:cn: sourcehost
|
|
default:ObjectClass: top
|
|
default:ObjectClass: nsIndex
|
|
default:nsSystemIndex: false
|
|
only:nsIndexType: eq,pres,sub
|
|
|
|
dn: cn=memberservice,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
default:cn: memberservice
|
|
default:ObjectClass: top
|
|
default:ObjectClass: nsIndex
|
|
default:nsSystemIndex: false
|
|
only:nsIndexType: eq,pres,sub
|
|
|
|
dn: cn=managedby,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
default:cn: managedby
|
|
default:ObjectClass: top
|
|
default:ObjectClass: nsIndex
|
|
default:nsSystemIndex: false
|
|
only:nsIndexType: eq,pres,sub
|
|
|
|
dn: cn=memberallowcmd,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
default:cn: memberallowcmd
|
|
default:ObjectClass: top
|
|
default:ObjectClass: nsIndex
|
|
default:nsSystemIndex: false
|
|
only:nsIndexType: eq,pres,sub
|
|
|
|
dn: cn=memberdenycmd,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
default:cn: memberdenycmd
|
|
default:ObjectClass: top
|
|
default:ObjectClass: nsIndex
|
|
default:nsSystemIndex: false
|
|
only:nsIndexType: eq,pres,sub
|
|
|
|
dn: cn=ipasudorunas,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
default:cn: ipasudorunas
|
|
default:ObjectClass: top
|
|
default:ObjectClass: nsIndex
|
|
default:nsSystemIndex: false
|
|
only:nsIndexType: eq,pres,sub
|
|
|
|
dn: cn=ipasudorunasgroup,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
default:cn: ipasudorunasgroup
|
|
default:ObjectClass: top
|
|
default:ObjectClass: nsIndex
|
|
default:nsSystemIndex: false
|
|
only:nsIndexType: eq,pres,sub
|
|
|
|
dn: cn=automountkey,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
default:cn: automountkey
|
|
default:ObjectClass: top
|
|
default:ObjectClass: nsIndex
|
|
default:nsSystemIndex: false
|
|
default:nsIndexType: eq
|
|
|
|
dn: cn=ipakrbprincipalalias,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
default:cn: ipakrbprincipalalias
|
|
default:ObjectClass: top
|
|
default:ObjectClass: nsIndex
|
|
default:nsSystemIndex: false
|
|
default:nsIndexType: eq
|
|
|
|
dn: cn=ipauniqueid,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
default:cn: ipauniqueid
|
|
default:ObjectClass: top
|
|
default:ObjectClass: nsIndex
|
|
default:nsSystemIndex: false
|
|
default:nsIndexType: eq
|
|
|
|
dn: cn=ipatokenradiusconfiglink,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
default:cn: ipatokenradiusconfiglink
|
|
default:ObjectClass: top
|
|
default:ObjectClass: nsIndex
|
|
default:nsSystemIndex: false
|
|
only:nsIndexType: eq,pres,sub
|
|
|
|
dn: cn=ipaassignedidview,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
default:cn: ipaassignedidview
|
|
default:ObjectClass: top
|
|
default:ObjectClass: nsIndex
|
|
default:nsSystemIndex: false
|
|
only:nsIndexType: eq,pres,sub
|