Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

mdb_equality_candidates: (uniqueMember) not indexed #1

Closed
DimitriPapadopoulos opened this issue Dec 7, 2016 · 5 comments
Closed

mdb_equality_candidates: (uniqueMember) not indexed #1

DimitriPapadopoulos opened this issue Dec 7, 2016 · 5 comments

Comments

@DimitriPapadopoulos
Copy link
Member

DimitriPapadopoulos commented Dec 7, 2016

The LDAP service writes error messages in the system log /var/log/syslog :

mdb_equality_candidates: (uniqueMember) not indexed
@DimitriPapadopoulos
Copy link
Member Author

See for example Eliminating openldap '(uid) not indexed' errors. This happens whenever LDAP searches a non-indexed attribute. Here is the current indexing on the project server:

# /usr/sbin/slapcat -n 0 | grep olcDbIndex
olcDbIndex: objectClass eq
olcDbIndex: cn,uid eq
olcDbIndex: uidNumber,gidNumber eq
olcDbIndex: member,memberUid eq
# 

@DimitriPapadopoulos
Copy link
Member Author

Create an LDIF file to change the indexing attributes:

dn: olcDatabase={1}mdb,cn=config
changetype: modify
add: olcDbIndex
olcDbIndex: uniqueMember eq

@DimitriPapadopoulos
Copy link
Member Author

Apply the LDIF file:

# ldapadd -Y EXTERNAL -H ldapi:/// -f index.ldif
SASL/EXTERNAL authentication started
SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
SASL SSF: 0
modifying entry "olcDatabase={1}mdb,cn=config"

# 

@DimitriPapadopoulos
Copy link
Member Author

DimitriPapadopoulos commented Dec 7, 2016

Here is the new indexing on the project server:

# /usr/sbin/slapcat -n 0 | grep olcDbIndex
olcDbIndex: objectClass eq
olcDbIndex: cn,uid eq
olcDbIndex: uidNumber,gidNumber eq
olcDbIndex: member,memberUid eq
olcDbIndex: uniqueMember eq
#  

@DimitriPapadopoulos
Copy link
Member Author

Seems to have fixed this issue.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant