Hi Isabella,
The filter is indeed unindexed:
!subfilter is always unindexed
email has no index
So the notice message is normal.
Now the fact that you get or not an unindexed note in search result will
depends on the number of descendants of ou=Users,ou=ds,dc=xxxx,dc=xxxx
If the number is below the allies threshold the search is indexed by the
ancestorid index.
Anyway I strongly recommend to add the email equality index
because having to look at all users means degraded performance while email
index will directly return a single entry ...
Regards
Pierre
On Wed, Feb 2, 2022 at 8:28 PM Ghiurea, Isabella <
Isabella.Ghiurea(a)nrc-cnrc.gc.ca> wrote:
Hello List ,
I start seeing the following error in ldap error log , DS cfg for
fractional muiltimaster replication with member plugin enabled local in
each host and excluded from replication . There is no index on email
attribute but nsAccounlock is indexed for equality, presence and substring.
NOTICE - ldbm_back_search - Unindexed search: search
base="ou=Users,ou=ds,dc=xxxx,dc=xxxx" scope=1
filter="(&(&(!(nsAccountLock=*))(!(nsAccountLock=true)))(email=
xxxxxxxxxx.com))" conn=xxx op= xxx
DS version :
89-ds-base-1.3.10.2-14.el7_9.x86_64
389-ds-console-1.2.16-1.el7.noarch
389-ds-base-snmp-1.3.10.2-14.el7_9.x86_64
389-ds-base-libs-1.3.10.2-14.el7_9.x86_64
BUT same ldapsearch for a DS cfg with same index cfg returns no errors in
this ldap version, please explain what’s going on .
389-ds-base-libs-1.3.9.1-10.el7.x86_64
389-ds-console-1.2.16-1.el7.noarch
389-ds-base-1.3.9.1-10.el7.x86_64
Thank you
Isabella
_______________________________________________
389-users mailing list -- 389-users(a)lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave(a)lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproje...
Do not reply to spam on the list, report it:
https://pagure.io/fedora-infrastructure
--
--
389 Directory Server Development Team