[Samba] samba4 adding an index to sam.ldb

[Andrew Bartlett]

On Tue, 2013-09-17 at 17:05 -0500, Bo Kersey wrote:
> Anyone have a clue as to how I set the fINDEXED attrib?   I have an additional attribute in samba4 ldap that I need indexed.
> 

You need to set the additional flag fATTINDEX into searchFlags where
fATTINDEX is value 1:
#define SEARCH_FLAG_ATTINDEX		0x0000001

So, just add one to the existing value in the schema attribute, and you
will find it indexed.  Let me know if you have more trouble.

> > ----- Original Message -----
> > > From: "Bo Kersey" <bo at vircio.com>
> > > To: "Andrew Bartlett" <abartlet at samba.org>
> > > Sent: Sunday, September 15, 2013 7:53:49 AM
> > > Subject: Re: [Samba] samba4 adding an index to sam.ldb
> > > 
> > > Andrew,
> > > I'm not sure where to find that part of the schema...
> > > 
> > > This is what I find for othermailbox
> > > dn: CN=Other-Mailbox,CN=Schema,CN=Configuration,
> > > objectClass: top
> > > objectClass: attributeSchema
> > > cn: Other-Mailbox
> > > instanceType: 4
> > > whenCreated: 20130913000849.0Z
> > > whenChanged: 20130913000849.0Z
> > > uSNCreated: 1011
> > > attributeID: 1.2.840.113556.1.4.651
> > > attributeSyntax: 2.5.5.12
> > > isSingleValued: FALSE
> > > uSNChanged: 1011
> > > showInAdvancedViewOnly: TRUE
> > > adminDisplayName: Other-Mailbox
> > > adminDescription: Other-Mailbox
> > > oMSyntax: 64
> > > searchFlags: 0
> > > lDAPDisplayName: otherMailbox
> > > name: Other-Mailbox
> > > objectGUID: bd150920-231c-437c-a5a4-726c2c136708
> > > schemaIDGUID: 0296c123-40da-11d1-a9c0-0000f80367c1
> > > attributeSecurityGUID: e48d0154-bcf8-11d1-8702-00c04fb96050
> > > systemOnly: FALSE
> > > objectCategory: CN=Attribute-Schema,CN=Schema,CN=Configuration,
> > > distinguishedName: CN=Other-Mailbox,CN=Schema,CN=Configuration,
> > > 
> > > And when I grep through the other objects at this level, I don't find an
> > > fINDEXED attrib or any /index/i attribs that make sense for that matter.
> > > 
> > > Thanks!
> > > Bo
> > > 
> > > 
> > > 
> > > ----- Original Message -----
> > > > From: "Andrew Bartlett" <abartlet at samba.org>
> > > > To: "Bo Kersey" <bo at vircio.com>
> > > > Cc: samba at lists.samba.org
> > > > Sent: Saturday, September 14, 2013 5:46:21 PM
> > > > Subject: Re: [Samba] samba4 adding an index to sam.ldb
> > > > 
> > > > On Sat, 2013-09-14 at 09:10 -0500, Bo Kersey wrote:
> > > > > I have a large installation >20k users.  We're using samba4 for AD
> > > > > Authentication, and also email address validation.  I'm trying to edit
> > > > > the
> > > > > @INDEXLIST in sam.ldb to add an index on otherMailbox to speed up
> > > > > searches
> > > > > (0.05 sec for indexed, vs 2.5 sec for non-indexed searches) I'm finding
> > > > > that when I use ldbedit to do this, it appears to add the additional
> > > > > @IDXATTR.  However, when I go back and check via ldbsearch, the
> > > > > attribute
> > > > > is not there.  Seems to be failing silently...  How do I debug this?
> > > > > 
> > > > 
> > > > We override that list with a list from the fINDEXED attribute in the
> > > > schema.  Just modify that and the new index will be created.
> > > > 
> > > > I'm also keen to hear more about how you have gone with an installation
> > > > that large, as there are not many installations as large as yours, and
> > > > it will help us advise others.
> > > > 
> > > > Thanks!
> > > > 
> > > > Andrew Bartlett
> > > > 
> > > > --
> > > > Andrew Bartlett
> > > > http://samba.org/~abartlet/
> > > > Authentication Developer, Samba Team           http://samba.org
> > > > 
> > > > 
> > > > 
> > > 
> > > --
> > > Bo Kersey
> > > VirCIO - managed network solutions
> > > 4314 Avenue C
> > > Austin, TX 78751
> > > phone: (512)374-0500
> > > 
> > > If it is free, you are the product.
> > > 
> > > 
> > 
> > --
> > Bo Kersey
> > VirCIO - managed network solutions
> > 4314 Avenue C
> > Austin, TX 78751
> > phone: (512)374-0500
> > 
> > 
> 
> -- 
> Bo Kersey 
> VirCIO - managed network solutions 
> 4314 Avenue C 
> Austin, TX 78751 
> phone: (512)374-0500 
> 

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org