diff options
| author | Guilhem Moulin <guilhem.moulin@fripost.org> | 2012-04-29 19:07:46 +0200 |
|---|---|---|
| committer | Guilhem Moulin <guilhem.moulin@fripost.org> | 2012-04-29 19:07:46 +0200 |
| commit | da522a6e3c76d88bdc8b027106d571664825876c (patch) | |
| tree | 145d929191853bb261dd05684c2e33097d3091ca | |
| parent | 7ffd1962666c745ae27d03157dc0473035887a67 (diff) | |
[LDAP] Addind more indexes.
| -rw-r--r-- | fripost-docs.org | 20 |
1 files changed, 16 insertions, 4 deletions
diff --git a/fripost-docs.org b/fripost-docs.org index b872817..ce7ebb7 100644 --- a/fripost-docs.org +++ b/fripost-docs.org @@ -778,10 +778,14 @@ be looking for e.g., the `uid' attribute. olcDbIndex: objectClass eq - :: /etc/ldap/fripost/index.ldif + :: /etc/ldap/fripost/indexes.ldif dn: olcDatabase={1}hdb,cn=config changetype: modify + # Needed for the replicates. + add: olcDbIndex + olcDbIndex: entryUUID eq + - delete: olcDbIndex olcDbIndex: objectClass eq - @@ -801,7 +805,7 @@ be looking for e.g., the `uid' attribute. olcDbIndex: uid eq,sub - add: olcDbIndex - olcDbIndex: mailLocalAddress eq + olcDbIndex: mailTarget,mailLocalAddress eq - add: olcDbIndex olcDbIndex: isActive eq @@ -809,20 +813,28 @@ be looking for e.g., the `uid' attribute. add: olcDbIndex olcDbIndex: owner eq -ldapmodify -QY EXTERNAL -H ldapi:/// -f /etc/ldap/fripost/index.ldif +ldapmodify -QY EXTERNAL -H ldapi:/// -f /etc/ldap/fripost/indexes.ldif :: ldapsearch -LLLQY EXTERNAL -H ldapi:/// -b cn=config "(olcDatabase={1}hdb)" [...] + olcDbIndex: entryUUID eq olcDbIndex: objectClass pres,eq olcDbIndex: cn eq olcDbIndex: ou eq olcDbIndex: dc eq,sub olcDbIndex: uid eq,sub - olcDbIndex: mailLocalAddress eq + olcDbIndex: mailTarget,mailLocalAddress eq olcDbIndex: isActive eq olcDbIndex: owner eq + +Note: We can add indexes on a populated database, but then we need to reindex the tree: + + sudo /etc/init.d/slapd stop + sudo -u openldap slapindex + sudo /etc/init.d/slapd start + ***** Restrict the access The default ACL is not restrictive enough for our purpose. |