On 06/08/2015 03:31 AM, Fraser Tweedale wrote: > New patches attached. Comments inline.
Thanks Fraser! ... >> 5) >> Missing referint plugin configuration for attribute >> 'ipacaaclmembercertprofile' >> Please add it into install/updates/25-referint.update (+ other member >> attributes if missing) >> > Added this. There is a comment in 25-referint.update: > > # pres and eq indexes defined in 20-indices.update must be set > # for all the attributes > > Can you explain what is required here? Is it just to add: I see > things for memberUser and memberHost in indices.ldif but nothing for > memberService. Do I need to add to indices.ldif: > > dn: cn=memberProfile,cn=index,cn=userRoot,cn=ldbm > database,cn=plugins,cn=config > changetype: add > cn: memberProfile > ObjectClass: top > ObjectClass: nsIndex > nsSystemIndex: false > nsIndexType: eq > nsIndexType: pres > nsIndexType: sub > > , and similarly for memberCa? Sorry I do not know much about LDAP > indexing. AFAIR, yes. BTW, where does the "sub" index come from? It is quite an expensive index to use and I now cannot think of memberProfile search where you would need a substring... Thanks, Martin -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
