On Dec 18, 2012 5:17 PM, "François Dagorn" <Francois.Dagorn@univ-rennes1.fr> wrote:
>
> Le 18/12/2012 15:35, Marco Pizzoli a écrit :
>
> >
> > They need to have a "presence" index to leverage indexing with that query.
> > (attribute=*) simply means check that the attribute exists.
> > I suspect your admin has indexed those attirbutes only for "eq".
> >
>
> I guess you are right, I'm not aware enough of LDAP. But may be you can tell
> me at a glance what is wrong :
>
> May "ldapsearch -x 'uid=*'" give me a quick answer or not ? i.e. tell
> me only if this attribute exists or not.
>
> Currently this search tries  to list all entries in the directory and
> of course it lasts a very long time.

Indeed... if the presence index on the uid attribute doesn't exist, you are doing a full scan on your (sub) tree. So, the load is semi directly related to the dimension of your data .

You are just tellling "give me all entries which have that attribute, whatever it is its value". You can AND that condition with something more selective in order to limit the data set returned.

Did I miss the point you were asking? Please let me know if that's the case
M.

>
> Cheers.
>
> --
> François
> _______________________________________________
> sssd-devel mailing list
> sssd-devel@lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-devel