mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-01-11 08:41:55 -06:00
725899595f
During an investigation into filter optimisation in 389DS it was discovered that two attributes of the certmap query are unindexed. Due to the nature of LDAP filters, if any member of an OR query is unindexed, the entire OR becomes unindexed. This is then basically a full-table scan, which applies the filter test to the contained members. Fixes: https://pagure.io/freeipa/issue/7932 Fixes: https://pagure.io/freeipa/issue/7933 Reviewed-By: Florence Blanc-Renaud <flo@redhat.com>
420 lines
9.5 KiB
Plaintext
420 lines
9.5 KiB
Plaintext
dn: cn=krbPrincipalName,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
objectClass:top
|
|
objectClass:nsIndex
|
|
cn:krbPrincipalName
|
|
nsSystemIndex:false
|
|
nsIndexType:eq
|
|
nsIndexType:sub
|
|
nsMatchingRule:caseIgnoreIA5Match
|
|
nsMatchingRule:caseExactIA5Match
|
|
|
|
dn: cn=ou,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
objectClass:top
|
|
objectClass:nsIndex
|
|
cn:ou
|
|
nsSystemIndex:false
|
|
nsIndexType:eq
|
|
nsIndexType:sub
|
|
|
|
dn: cn=carLicense,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
objectClass:top
|
|
objectClass:nsIndex
|
|
cn:carLicense
|
|
nsSystemIndex:false
|
|
nsIndexType:eq
|
|
nsIndexType:sub
|
|
|
|
dn: cn=title,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
objectClass:top
|
|
objectClass:nsIndex
|
|
cn:title
|
|
nsSystemIndex:false
|
|
nsIndexType:eq
|
|
nsIndexType:sub
|
|
|
|
dn: cn=manager,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
objectClass:top
|
|
objectClass:nsIndex
|
|
cn:manager
|
|
nsSystemIndex:false
|
|
nsIndexType:eq
|
|
nsIndexType:pres
|
|
nsIndexType:sub
|
|
|
|
dn: cn=secretary,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
objectClass:top
|
|
objectClass:nsIndex
|
|
cn:secretary
|
|
nsSystemIndex:false
|
|
nsIndexType:eq
|
|
nsIndexType:pres
|
|
nsIndexType:sub
|
|
|
|
dn: cn=displayname,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
objectClass:top
|
|
objectClass:nsIndex
|
|
cn:displayname
|
|
nsSystemIndex:false
|
|
nsIndexType:eq
|
|
nsIndexType:sub
|
|
|
|
dn: cn=uid,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: modify
|
|
add: nsIndexType
|
|
nsIndexType:sub
|
|
|
|
dn: cn=uidnumber,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
objectClass:top
|
|
objectClass:nsIndex
|
|
cn:uidnumber
|
|
nsSystemIndex:false
|
|
nsIndexType:eq
|
|
nsMatchingRule: integerOrderingMatch
|
|
|
|
dn: cn=gidnumber,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
objectClass:top
|
|
objectClass:nsIndex
|
|
cn:gidnumber
|
|
nsSystemIndex:false
|
|
nsIndexType:eq
|
|
nsMatchingRule: integerOrderingMatch
|
|
|
|
dn: cn=ntUniqueId,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: modify
|
|
replace: nsIndexType
|
|
nsIndexType: eq
|
|
nsIndexType: pres
|
|
|
|
dn: cn=ntUserDomainId,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: modify
|
|
replace: nsIndexType
|
|
nsIndexType: eq
|
|
nsIndexType: pres
|
|
|
|
dn: cn=fqdn,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
ObjectClass: top
|
|
ObjectClass: nsIndex
|
|
cn: fqdn
|
|
nsSystemIndex: false
|
|
nsIndexType: eq
|
|
nsIndexType: pres
|
|
nsIndexType: sub
|
|
|
|
dn: cn=macAddress,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
ObjectClass: top
|
|
ObjectClass: nsIndex
|
|
cn: macAddress
|
|
nsSystemIndex: false
|
|
nsIndexType: eq
|
|
nsIndexType: pres
|
|
|
|
dn: cn=memberHost,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
cn: memberHost
|
|
ObjectClass: top
|
|
ObjectClass: nsIndex
|
|
nsSystemIndex: false
|
|
nsIndexType: eq
|
|
nsIndexType: pres
|
|
nsIndexType: sub
|
|
|
|
dn: cn=memberUser,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
cn: memberUser
|
|
ObjectClass: top
|
|
ObjectClass: nsIndex
|
|
nsSystemIndex: false
|
|
nsIndexType: eq
|
|
nsIndexType: pres
|
|
nsIndexType: sub
|
|
|
|
dn: cn=sourcehost,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
cn: sourcehost
|
|
ObjectClass: top
|
|
ObjectClass: nsIndex
|
|
nsSystemIndex: false
|
|
nsIndexType: eq
|
|
nsIndexType: pres
|
|
nsIndexType: sub
|
|
|
|
dn: cn=memberservice,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
cn: memberservice
|
|
ObjectClass: top
|
|
ObjectClass: nsIndex
|
|
nsSystemIndex: false
|
|
nsIndexType: eq
|
|
nsIndexType: pres
|
|
nsIndexType: sub
|
|
|
|
dn: cn=managedby,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
cn: managedby
|
|
ObjectClass: top
|
|
ObjectClass: nsIndex
|
|
nsSystemIndex: false
|
|
nsIndexType: eq
|
|
nsIndexType: pres
|
|
nsIndexType: sub
|
|
|
|
dn: cn=memberallowcmd,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
cn: memberallowcmd
|
|
ObjectClass: top
|
|
ObjectClass: nsIndex
|
|
nsSystemIndex: false
|
|
nsIndexType: eq
|
|
nsIndexType: pres
|
|
nsIndexType: sub
|
|
|
|
dn: cn=memberdenycmd,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
cn: memberdenycmd
|
|
ObjectClass: top
|
|
ObjectClass: nsIndex
|
|
nsSystemIndex: false
|
|
nsIndexType: eq
|
|
nsIndexType: pres
|
|
nsIndexType: sub
|
|
|
|
dn: cn=ipasudorunas,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
cn: ipasudorunas
|
|
ObjectClass: top
|
|
ObjectClass: nsIndex
|
|
nsSystemIndex: false
|
|
nsIndexType: eq
|
|
nsIndexType: pres
|
|
nsIndexType: sub
|
|
|
|
dn: cn=ipasudorunasgroup,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
cn: ipasudorunasgroup
|
|
ObjectClass: top
|
|
ObjectClass: nsIndex
|
|
nsSystemIndex: false
|
|
nsIndexType: eq
|
|
nsIndexType: pres
|
|
nsIndexType: sub
|
|
|
|
dn: cn=automountkey,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
cn: automountkey
|
|
ObjectClass: top
|
|
ObjectClass: nsIndex
|
|
nsSystemIndex: false
|
|
nsIndexType: eq
|
|
nsIndexType: pres
|
|
|
|
dn: cn=automountMapName,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
cn: automountMapName
|
|
ObjectClass: top
|
|
ObjectClass: nsIndex
|
|
nsSystemIndex: false
|
|
nsIndexType: eq
|
|
|
|
dn: cn=ipaConfigString,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
cn: ipaConfigString
|
|
objectClass:top
|
|
objectClass:nsIndex
|
|
nsSystemIndex: false
|
|
nsIndexType: eq
|
|
|
|
dn: cn=ipaEnabledFlag,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
cn: ipaEnabledFlag
|
|
objectClass:top
|
|
objectClass:nsIndex
|
|
nsSystemIndex: false
|
|
nsIndexType: eq
|
|
|
|
dn: cn=ipaKrbAuthzData,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
cn: ipaKrbAuthzData
|
|
objectClass: top
|
|
objectClass: nsIndex
|
|
nsSystemIndex: false
|
|
nsIndexType: eq
|
|
nsIndexType: sub
|
|
|
|
dn: cn=ipakrbprincipalalias,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
cn: ipakrbprincipalalias
|
|
ObjectClass: top
|
|
ObjectClass: nsIndex
|
|
nsSystemIndex: false
|
|
nsIndexType: eq
|
|
|
|
dn: cn=ipauniqueid,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
cn: ipauniqueid
|
|
ObjectClass: top
|
|
ObjectClass: nsIndex
|
|
nsSystemIndex: false
|
|
nsIndexType: eq
|
|
|
|
dn: cn=ipaMemberCa,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
cn: ipaMemberCa
|
|
ObjectClass: top
|
|
ObjectClass: nsIndex
|
|
nsSystemIndex: false
|
|
nsIndexType: eq
|
|
nsIndexType: pres
|
|
nsIndexType: sub
|
|
|
|
dn: cn=ipaMemberCertProfile,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
cn: ipaMemberCertProfile
|
|
ObjectClass: top
|
|
ObjectClass: nsIndex
|
|
nsSystemIndex: false
|
|
nsIndexType: eq
|
|
nsIndexType: pres
|
|
nsIndexType: sub
|
|
|
|
dn: cn=userCertificate,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
cn: userCertificate
|
|
ObjectClass: top
|
|
ObjectClass: nsIndex
|
|
nsSystemIndex: false
|
|
nsIndexType: eq
|
|
nsIndexType: pres
|
|
|
|
dn: cn=ipalocation,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
cn: ipalocation
|
|
ObjectClass: top
|
|
ObjectClass: nsIndex
|
|
nsSystemIndex: false
|
|
nsIndexType: eq
|
|
nsIndexType: pres
|
|
|
|
dn: cn=krbCanonicalName,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
cn: krbCanonicalName
|
|
objectClass: top
|
|
objectClass: nsIndex
|
|
nsSystemIndex: false
|
|
nsIndexType: eq
|
|
nsIndexType: sub
|
|
|
|
dn: cn=serverhostname,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
cn: serverhostname
|
|
objectClass: top
|
|
objectClass: nsIndex
|
|
nsSystemIndex: false
|
|
nsIndexType: eq
|
|
nsIndexType: sub
|
|
|
|
dn: cn=description,cn=index,cn=userroot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
cn: description
|
|
objectClass: top
|
|
objectClass: nsindex
|
|
nssystemindex: false
|
|
nsindextype: eq
|
|
nsindextype: sub
|
|
|
|
dn: cn=l,cn=index,cn=userroot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
cn: l
|
|
objectClass: top
|
|
objectClass: nsindex
|
|
nssystemindex: false
|
|
nsindextype: eq
|
|
nsindextype: sub
|
|
|
|
dn: cn=nsOsVersion,cn=index,cn=userroot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
cn: nsOsVersion
|
|
objectClass: top
|
|
objectClass: nsindex
|
|
nssystemindex: false
|
|
nsindextype: eq
|
|
nsindextype: sub
|
|
|
|
dn: cn=nsHardwarePlatform,cn=index,cn=userroot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
cn: nsHardwarePlatform
|
|
objectClass: top
|
|
objectClass: nsindex
|
|
nssystemindex: false
|
|
nsindextype: eq
|
|
nsindextype: sub
|
|
|
|
dn: cn=nsHostLocation,cn=index,cn=userroot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
cn: nsHostLocation
|
|
objectClass: top
|
|
objectClass: nsindex
|
|
nssystemindex: false
|
|
nsindextype: eq
|
|
nsindextype: sub
|
|
|
|
# NOTE: There is no index on ipServiceProtocol because the index would have
|
|
# poor selectivity. An ipService entry has either 'tcp' or 'udp' as protocol.
|
|
dn: cn=ipServicePort,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
cn: ipServicePort
|
|
objectClass: top
|
|
objectClass: nsIndex
|
|
nsSystemIndex: false
|
|
nsIndexType: eq
|
|
|
|
dn: cn=accessRuleType,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
cn: accessRuleType
|
|
objectClass:top
|
|
objectClass:nsIndex
|
|
nsSystemIndex: false
|
|
nsIndexType: eq
|
|
|
|
dn: cn=hostCategory,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
cn: hostCategory
|
|
objectClass:top
|
|
objectClass:nsIndex
|
|
nsSystemIndex: false
|
|
nsIndexType: eq
|
|
|
|
dn: cn=idnsName,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
cn: idnsName
|
|
objectClass: top
|
|
objectClass: nsIndex
|
|
nsSystemIndex: false
|
|
nsIndexType: eq
|
|
|
|
dn: cn=ipaCertmapData,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
cn: ipaCertmapData
|
|
objectClass: top
|
|
objectClass: nsIndex
|
|
nsSystemIndex: false
|
|
nsIndexType: eq
|
|
|
|
dn: cn=altSecurityIdentities,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
|
|
changetype: add
|
|
cn: altSecurityIdentities
|
|
objectClass: top
|
|
objectClass: nsIndex
|
|
nsSystemIndex: false
|
|
nsIndexType: eq
|