[389-users] Re: Attempting to make memberUID searches case insensitive

2018-08-14 Thread Patrick Landry
Thanks for your help Ludwig. That definitely makes sense and matches 
exactly the behavior I am seeing. 

- Original Message -

> From: "Ludwig Krispenz" 
> To: 389-users@lists.fedoraproject.org
> Sent: Tuesday, August 14, 2018 2:31:53 AM
> Subject: [389-users] Re: Attempting to make memberUID searches case
> insensitive

> yes, the index was created, but an index is always only a means to improve
> performance of a specific operation, not a functional part.

> if you have an attribute with a specific syntax and a default matching rule
> you can use anotehr one, but you need to tell the server which matching rule
> to use in the search filter. Otherwise teh default on ewill be used. On
> extra index can speed up the use of an alternative MR.

> so the search filter shoud look somehow like: "(memberuid::=c12345)"

> On 08/10/2018 03:29 PM, Patrick Landry wrote:

> > If I run
> 

> > db_dump -p memberuid.db
> 

> > I see entries like this
> 

> > #\e1\04\00
> 
> > :caseIgnoreIA5Match:c1096\00
> 
> > BD\03\00
> 
> > :caseIgnoreIA5Match:c1096\00
> 
> > \98D\03\00
> 
> > :caseIgnoreIA5Match:c1096\00
> 
> > \a0D\03\00
> 
> > :caseIgnoreIA5Match:c1096\00
> 
> > \b0D\03\00
> 
> > :caseIgnoreIA5Match:c1096\00
> 

> > and also
> 

> > #\e1\04\00
> 
> > =C1096\00
> 
> > BD\03\00
> 
> > =C1096\00
> 
> > \98D\03\00
> 
> > =C1096\00
> 
> > \a0D\03\00
> 
> > =C1096\00
> 
> > \b0D\03\00
> 
> > =C1096\00
> 

> > which seems to indicate that adding the matching rule to the index
> > definition
> 
> > did something.
> 

> > - Original Message -----
> 

> > > From: "William Brown" 
> > 
> 
> > > To: "General discussion list for the 389 Directory server project."
> > > <389-users@lists.fedoraproject.org>
> > 
> 
> > > Sent: Thursday, August 9, 2018 6:07:17 PM
> > 
> 
> > > Subject: [389-users] Re: Attempting to make memberUID searches case
> > > insensitive
> > 
> 

> > > On Thu, 2018-08-09 at 08:23 -0500, Patrick Landry wrote:
> > 
> 
> > > > So what is the point of adding the matching rule when defining the
> > 
> 
> > > > index? Is that
> > 
> 
> > > > simply so that the index is built with the *capability* of supporting
> > 
> 
> > > > searches using
> > 
> 
> > > > that matching rule explicitly?
> > 
> 

> > > I think it would be worth trying Ludwig's suggestion so we can work out
> > 
> 
> > > *what's* going on. Perhaps the assumption we are making about what the
> > 
> 
> > > MR does is incorrect, and it's building a supplemental index. It's good
> > 
> 
> > > to check these things to understand the behaviours.
> > 
> 

> > > Perhaps something else to do is check to see what content is in the
> > 
> 
> > > memberuid.db file to see what indexes were added.
> > 
> 

> > > Finally, did you run db2index again? I don't know if you answered this.
> > 
> 

> > > --
> > 
> 
> > > Sincerely,
> > 
> 

> > > William
> > 
> 
> > > ___
> > 
> 
> > > 389-users mailing list -- 389-users@lists.fedoraproject.org
> > 
> 
> > > To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
> > 
> 
> > > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> > 
> 
> > > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> > 
> 
> > > List Archives:
> > > https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org/message/WZZPSVL7QQWQSR43BHTJ6NTPVESYPZ2N/
> > 
> 

> > --
> 

> > 
> 

> > 
> 

> > Patrick Landry
> 
> > Director, UCSS
> 
> > University of Louisiana at Lafayette
> 
> > patrick.lan...@louisiana.edu
> 

> > ___
> 
> > 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe
> > send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of
> > Conduct: https://getfedora.org/code-of-conduct.html List Guidelines:
> > https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives:
> > https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject

[389-users] Re: Attempting to make memberUID searches case insensitive

2018-08-14 Thread Ludwig Krispenz
yes, the index was created, but an index is always only a means to 
improve performance of a specific operation, not a functional part.


if you have an attribute with a specific syntax and a default matching 
rule you can use anotehr one, but you need to tell the server which 
matching rule to use in the search filter. Otherwise teh default on 
ewill be used. On extra index can speed up the use of an alternative MR.


so the search filter shoud look somehow like: "(memberuid::=c12345)"

On 08/10/2018 03:29 PM, Patrick Landry wrote:

If I run

db_dump -p memberuid.db

I see entries like this

#\e1\04\00
:caseIgnoreIA5Match:c1096\00
BD\03\00
:caseIgnoreIA5Match:c1096\00
\98D\03\00
:caseIgnoreIA5Match:c1096\00
\a0D\03\00
:caseIgnoreIA5Match:c1096\00
\b0D\03\00
:caseIgnoreIA5Match:c1096\00

and also

 #\e1\04\00
 =C1096\00
 BD\03\00
 =C1096\00
 \98D\03\00
 =C1096\00
 \a0D\03\00
 =C1096\00
 \b0D\03\00
 =C1096\00

which seems to indicate that adding the matching rule to the index 
definition

did something.



*From: *"William Brown" 
*To: *"General discussion list for the 389 Directory server
project." <389-users@lists.fedoraproject.org>
*Sent: *Thursday, August 9, 2018 6:07:17 PM
*Subject: *[389-users] Re: Attempting to make memberUID searches
case insensitive

On Thu, 2018-08-09 at 08:23 -0500, Patrick Landry wrote:
> So what is the point of adding the matching rule when defining the
> index? Is that
> simply so that the index is built with the *capability* of
supporting
> searches using
> that matching rule explicitly?

I think it would be worth trying Ludwig's suggestion so we can
work out
*what's* going on. Perhaps the assumption we are making about what the
MR does is incorrect, and it's building a supplemental index. It's
good
to check these things to understand the behaviours.

Perhaps something else to do is check to see what content is in the
memberuid.db file to see what indexes were added.

Finally, did you run db2index again? I don't know if you answered
this.

-- 
Sincerely,


William
___
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to
389-users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:

https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org/message/WZZPSVL7QQWQSR43BHTJ6NTPVESYPZ2N/




--



*Patrick Landry
*Director, UCSS*
*University of Louisiana at Lafayette*
*patrick.lan...@louisiana.edu <mailto:p...@louisiana.edu>





___
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org/message/TEHKFUHBOUMSFOGNM3N4VJURJSXI7H47/


--
Red Hat GmbH, http://www.de.redhat.com/, Registered seat: Grasbrunn,
Commercial register: Amtsgericht Muenchen, HRB 153243,
Managing Directors: Charles Cachera, Michael Cunningham, Michael O'Neill, Eric 
Shander

___
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org/message/TG2QZWJIKMV3D3QU2YMGXJ2HZ4PWV333/


[389-users] Re: Attempting to make memberUID searches case insensitive

2018-08-10 Thread William Brown
On Thu, 2018-08-09 at 18:45 -0500, Patrick Landry wrote:
> Sorry. I did not answer your db2index question. I have two servers
> using multimaster replication and I did run db2index.pl on both
> servers
> after adding the index.
> 
> As to Ludwig's suggestion, I can run the queries using
> ":caseIgnoreIA5Match:" 
> in an extensible match search filter
> (memberuid:caseIgnoreIA5Match:=c1096)
> and the results are correct. I did not perform any timing tests on
> that before
> I created the index so I cannot say if it is faster after the index
> was created.
> My feel is that it is faster.
> 
> I will check the memberuid.db file.
> 
> I would not be surprised if, as Ludwig states, the default matching
> rule for
> the attribute is used unless it is overridden in the search filter.
> That was 
> just not my understanding going in.

Reading this email, and seeing the output of your memberuid.db, I
believe that Ludwig is correct. the caseIgnoreIA5Match is an *extended*
index type, which you must request on search. This is demonstrated by
the evidence and search results you have presented.

So I would have to say that you need to put in the MR in the search
request for this to function the way you desire.

Another (invasive) option would be to alter the memberuid schema to
change it's syntax type to affect the behaviour of the indexing code.
This has some risks on upgrade and compatability. If I recall, the
content of 99user.ldif is scanned on startup and duplicate schema
entries compared to the system schema are "removed" due to a past issue
with IPA I believe. This means if you over-loaded the schema in
99user.ldif it may vanish with a yum upgrade.

Hope that helps,

> 
> Thanks for your time so far.
> 
> > From: "William Brown" 
> > To: "General discussion list for the 389 Directory server project."
> > <389-users@lists.fedoraproject.org>
> > Sent: Thursday, August 9, 2018 6:07:17 PM
> > Subject: [389-users] Re: Attempting to make memberUID searches case
> > insensitive
> > 
> > On Thu, 2018-08-09 at 08:23 -0500, Patrick Landry wrote:
> > > So what is the point of adding the matching rule when defining
> > the
> > > index? Is that
> > > simply so that the index is built with the *capability* of
> > supporting
> > > searches using
> > > that matching rule explicitly?
> > 
> > I think it would be worth trying Ludwig's suggestion so we can work
> > out
> > *what's* going on. Perhaps the assumption we are making about what
> > the
> > MR does is incorrect, and it's building a supplemental index. It's
> > good
> > to check these things to understand the behaviours. 
> > 
> > Perhaps something else to do is check to see what content is in the
> > memberuid.db file to see what indexes were added.
> > 
> > Finally, did you run db2index again? I don't know if you answered
> > this.
> > 
> > -- 
> > Sincerely,
> > 
> > William
> > ___
> > 389-users mailing list -- 389-users@lists.fedoraproject.org
> > To unsubscribe send an email to 
> > 389-users-le...@lists.fedoraproject.org
> > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> > List Guidelines: 
> > https://fedoraproject.org/wiki/Mailing_list_guidelines
> > List Archives: 
> > https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org/message/WZZPSVL7QQWQSR43BHTJ6NTPVESYPZ2N/
> 
> 
> ___
> 389-users mailing list -- 389-users@lists.fedoraproject.org
> To unsubscribe send an email to 
> 389-users-le...@lists.fedoraproject.org
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: 
> https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: 
> https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org/message/74R5TUTPOHGEDSHQQKYJ356NAPYLTEYC/
-- 
Sincerely,

William
___
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org/message/EK2FKLD4VNOUIT7EIKHWOVLXEUD6REAY/


[389-users] Re: Attempting to make memberUID searches case insensitive

2018-08-10 Thread Patrick Landry
If I run 

db_dump -p memberuid.db 

I see entries like this 

#\e1\04\00 
:caseIgnoreIA5Match:c1096\00 
BD\03\00 
:caseIgnoreIA5Match:c1096\00 
\98D\03\00 
:caseIgnoreIA5Match:c1096\00 
\a0D\03\00 
:caseIgnoreIA5Match:c1096\00 
\b0D\03\00 
:caseIgnoreIA5Match:c1096\00 

and also 

#\e1\04\00 
=C1096\00 
BD\03\00 
=C1096\00 
\98D\03\00 
=C1096\00 
\a0D\03\00 
=C1096\00 
\b0D\03\00 
=C1096\00 

which seems to indicate that adding the matching rule to the index definition 
did something. 

- Original Message -

> From: "William Brown" 
> To: "General discussion list for the 389 Directory server project."
> <389-users@lists.fedoraproject.org>
> Sent: Thursday, August 9, 2018 6:07:17 PM
> Subject: [389-users] Re: Attempting to make memberUID searches case
> insensitive

> On Thu, 2018-08-09 at 08:23 -0500, Patrick Landry wrote:
> > So what is the point of adding the matching rule when defining the
> > index? Is that
> > simply so that the index is built with the *capability* of supporting
> > searches using
> > that matching rule explicitly?

> I think it would be worth trying Ludwig's suggestion so we can work out
> *what's* going on. Perhaps the assumption we are making about what the
> MR does is incorrect, and it's building a supplemental index. It's good
> to check these things to understand the behaviours.

> Perhaps something else to do is check to see what content is in the
> memberuid.db file to see what indexes were added.

> Finally, did you run db2index again? I don't know if you answered this.

> --
> Sincerely,

> William
> ___
> 389-users mailing list -- 389-users@lists.fedoraproject.org
> To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org/message/WZZPSVL7QQWQSR43BHTJ6NTPVESYPZ2N/

-- 



Patrick Landry 
Director, UCSS 
University of Louisiana at Lafayette 
patrick.lan...@louisiana.edu 
___
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org/message/TEHKFUHBOUMSFOGNM3N4VJURJSXI7H47/


[389-users] Re: Attempting to make memberUID searches case insensitive

2018-08-09 Thread Patrick Landry
Sorry. I did not answer your db2index question. I have two servers 
using multimaster replication and I did run db2index.pl on both servers 
after adding the index. 

As to Ludwig's suggestion, I can run the queries using ":caseIgnoreIA5Match:" 
in an extensible match search filter (memberuid:caseIgnoreIA5Match:=c1096) 
and the results are correct. I did not perform any timing tests on that before 
I created the index so I cannot say if it is faster after the index was 
created. 
My feel is that it is faster. 

I will check the memberuid.db file. 

I would not be surprised if, as Ludwig states, the default matching rule for 
the attribute is used unless it is overridden in the search filter. That was 
just not my understanding going in. 

Thanks for your time so far. 

- Original Message -

> From: "William Brown" 
> To: "General discussion list for the 389 Directory server project."
> <389-users@lists.fedoraproject.org>
> Sent: Thursday, August 9, 2018 6:07:17 PM
> Subject: [389-users] Re: Attempting to make memberUID searches case
> insensitive

> On Thu, 2018-08-09 at 08:23 -0500, Patrick Landry wrote:
> > So what is the point of adding the matching rule when defining the
> > index? Is that
> > simply so that the index is built with the *capability* of supporting
> > searches using
> > that matching rule explicitly?

> I think it would be worth trying Ludwig's suggestion so we can work out
> *what's* going on. Perhaps the assumption we are making about what the
> MR does is incorrect, and it's building a supplemental index. It's good
> to check these things to understand the behaviours.

> Perhaps something else to do is check to see what content is in the
> memberuid.db file to see what indexes were added.

> Finally, did you run db2index again? I don't know if you answered this.

> --
> Sincerely,

> William
> ___
> 389-users mailing list -- 389-users@lists.fedoraproject.org
> To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org/message/WZZPSVL7QQWQSR43BHTJ6NTPVESYPZ2N/

-- 



Patrick Landry 
Director, UCSS 
University of Louisiana at Lafayette 
patrick.lan...@louisiana.edu 
___
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org/message/74R5TUTPOHGEDSHQQKYJ356NAPYLTEYC/


[389-users] Re: Attempting to make memberUID searches case insensitive

2018-08-09 Thread William Brown
On Thu, 2018-08-09 at 08:23 -0500, Patrick Landry wrote:
> So what is the point of adding the matching rule when defining the
> index? Is that
> simply so that the index is built with the *capability* of supporting
> searches using
> that matching rule explicitly?

I think it would be worth trying Ludwig's suggestion so we can work out
*what's* going on. Perhaps the assumption we are making about what the
MR does is incorrect, and it's building a supplemental index. It's good
to check these things to understand the behaviours. 

Perhaps something else to do is check to see what content is in the
memberuid.db file to see what indexes were added.

Finally, did you run db2index again? I don't know if you answered this.

-- 
Sincerely,

William
___
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org/message/WZZPSVL7QQWQSR43BHTJ6NTPVESYPZ2N/


[389-users] Re: Attempting to make memberUID searches case insensitive

2018-08-09 Thread Patrick Landry
So what is the point of adding the matching rule when defining the index? Is 
that 
simply so that the index is built with the *capability* of supporting searches 
using 
that matching rule explicitly? 

- Original Message -

> From: "Ludwig Krispenz" 
> To: 389-users@lists.fedoraproject.org
> Sent: Thursday, August 9, 2018 3:52:37 AM
> Subject: [389-users] Re: Attempting to make memberUID searches case
> insensitive

> I think you need to specify the matching rule in the search if you do
> not want to use the default one
-- 



Patrick Landry 
Director, UCSS 
University of Louisiana at Lafayette 
patrick.lan...@louisiana.edu 
___
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org/message/JIZ4E4VFX7UEUZLACNFP2OIA2KR77NWW/


[389-users] Re: Attempting to make memberUID searches case insensitive

2018-08-09 Thread Ludwig Krispenz


On 08/09/2018 02:04 AM, William Brown wrote:

On Wed, 2018-08-08 at 07:23 -0500, Patrick Landry wrote:

Here is the index definition:

# memberuid, index, userRoot, ldbm database, plugins, config
dn: cn=memberuid,cn=index,cn=userRoot,cn=ldbm
database,cn=plugins,cn=config
objectClass: top
objectClass: nsIndex
nsSystemIndex: false
cn: memberuid
nsIndexType: eq
nsIndexType: pres
nsMatchingRule: caseIgnoreIA5Match

Seems correct to me.


Searches on memberuid do run much faster now so the index does seem
to be working.

I have groups which have multivalued memberuid attributes. A search
for (memberuid=C12345)
returns several group entries but a search for (memberuid=c12345)
does not return any entries.
I think you need to specify the matching rule in the search if you do 
not want to use the default one

Have you done a db2index since you made the index change above? It
could still be using the original index (which is case sensitive), and
we only take syntax into account as we create the index.





From: "William Brown" 
To: "General discussion list for the 389 Directory server project."
<389-users@lists.fedoraproject.org>
Sent: Tuesday, August 7, 2018 7:04:01 PM
Subject: [389-users] Re: Attempting to make memberUID searches case
insensitive

On Tue, 2018-08-07 at 16:52 -0500, Patrick Landry wrote:

I am attempting to create an index which will allow searches on

the

memberUID
attribute to be case insensitive. Using the 389-console, I

created an

Additional Index
for memberuid and added "caseIgnoreIA5Match" as a Matching Rule.

This

did not
produce the desired result.

It would be best to see your complete index definition from
cn=config
for memberUID. I think something like:

ldapsearch -b cn=config -D "cn=Directory Manager" ...
'(cn=memberuid)'

would suffice to find the index rules.


Initially I would simply like to know if what I am asking for is
possible. From reading
the docs it seems it should be. I am able to force a
caseIgnoreIA5Match by using an
extensible match search filter.

It seems like a reasonable request IMO.


Once I know it is possible and that I am following the correct
procedure then I can
provide as much detail as necessary to assist in debugging.



___
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to
389-users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org/message/3M4FAD37YMU63GUFMKY6AYDLWIHIPUCX/


--
Red Hat GmbH, http://www.de.redhat.com/, Registered seat: Grasbrunn,
Commercial register: Amtsgericht Muenchen, HRB 153243,
Managing Directors: Charles Cachera, Michael Cunningham, Michael O'Neill, Eric 
Shander
___
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org/message/37DAPAKHLI7UVV2RRL4MJE7KSWGH7IQI/


[389-users] Re: Attempting to make memberUID searches case insensitive

2018-08-08 Thread William Brown
On Wed, 2018-08-08 at 07:23 -0500, Patrick Landry wrote:
> Here is the index definition:
> 
> # memberuid, index, userRoot, ldbm database, plugins, config
> dn: cn=memberuid,cn=index,cn=userRoot,cn=ldbm
> database,cn=plugins,cn=config
> objectClass: top
> objectClass: nsIndex
> nsSystemIndex: false
> cn: memberuid
> nsIndexType: eq
> nsIndexType: pres
> nsMatchingRule: caseIgnoreIA5Match

Seems correct to me.

> 
> Searches on memberuid do run much faster now so the index does seem
> to be working.
> 
> I have groups which have multivalued memberuid attributes. A search
> for (memberuid=C12345)
> returns several group entries but a search for (memberuid=c12345)
> does not return any entries.

Have you done a db2index since you made the index change above? It
could still be using the original index (which is case sensitive), and
we only take syntax into account as we create the index.




> 
> > From: "William Brown" 
> > To: "General discussion list for the 389 Directory server project."
> > <389-users@lists.fedoraproject.org>
> > Sent: Tuesday, August 7, 2018 7:04:01 PM
> > Subject: [389-users] Re: Attempting to make memberUID searches case
> > insensitive
> > 
> > On Tue, 2018-08-07 at 16:52 -0500, Patrick Landry wrote:
> > > I am attempting to create an index which will allow searches on
> > the
> > > memberUID
> > > attribute to be case insensitive. Using the 389-console, I
> > created an
> > > Additional Index
> > > for memberuid and added "caseIgnoreIA5Match" as a Matching Rule.
> > This
> > > did not
> > > produce the desired result. 
> > 
> > It would be best to see your complete index definition from
> > cn=config
> > for memberUID. I think something like: 
> > 
> > ldapsearch -b cn=config -D "cn=Directory Manager" ...
> > '(cn=memberuid)' 
> > 
> > would suffice to find the index rules.
> > 
> > > 
> > > Initially I would simply like to know if what I am asking for is
> > > possible. From reading
> > > the docs it seems it should be. I am able to force a
> > > caseIgnoreIA5Match by using an
> > > extensible match search filter.
> > 
> > It seems like a reasonable request IMO. 
> > 
> > > 
> > > Once I know it is possible and that I am following the correct
> > > procedure then I can
> > > provide as much detail as necessary to assist in debugging.
> > > 
> > > 
> > ___
> > 389-users mailing list -- 389-users@lists.fedoraproject.org
> > To unsubscribe send an email to 
> > 389-users-le...@lists.fedoraproject.org
> > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> > List Guidelines: 
> > https://fedoraproject.org/wiki/Mailing_list_guidelines
> > List Archives: 
> > https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org/message/3M4FAD37YMU63GUFMKY6AYDLWIHIPUCX/
-- 
Sincerely,

William
___
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org/message/WR7V5WFG7OVNFP5D4K26EFVMBJRAAP26/


[389-users] Re: Attempting to make memberUID searches case insensitive

2018-08-08 Thread Patrick Landry
Here is the index definition: 

# memberuid, index, userRoot, ldbm database, plugins, config 
dn: cn=memberuid,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config 
objectClass: top 
objectClass: nsIndex 
nsSystemIndex: false 
cn: memberuid 
nsIndexType: eq 
nsIndexType: pres 
nsMatchingRule: caseIgnoreIA5Match 

Searches on memberuid do run much faster now so the index does seem to be 
working. 

I have groups which have multivalued memberuid attributes. A search for 
(memberuid=C12345) 
returns several group entries but a search for (memberuid=c12345) does not 
return any entries. 

- Original Message -

> From: "William Brown" 
> To: "General discussion list for the 389 Directory server project."
> <389-users@lists.fedoraproject.org>
> Sent: Tuesday, August 7, 2018 7:04:01 PM
> Subject: [389-users] Re: Attempting to make memberUID searches case
> insensitive

> On Tue, 2018-08-07 at 16:52 -0500, Patrick Landry wrote:
> > I am attempting to create an index which will allow searches on the
> > memberUID
> > attribute to be case insensitive. Using the 389-console, I created an
> > Additional Index
> > for memberuid and added "caseIgnoreIA5Match" as a Matching Rule. This
> > did not
> > produce the desired result.

> It would be best to see your complete index definition from cn=config
> for memberUID. I think something like:

> ldapsearch -b cn=config -D "cn=Directory Manager" ... '(cn=memberuid)'

> would suffice to find the index rules.

> >
> > Initially I would simply like to know if what I am asking for is
> > possible. From reading
> > the docs it seems it should be. I am able to force a
> > caseIgnoreIA5Match by using an
> > extensible match search filter.

> It seems like a reasonable request IMO.

> >
> > Once I know it is possible and that I am following the correct
> > procedure then I can
> > provide as much detail as necessary to assist in debugging.
> >
> >
> --
> Sincerely,

> William
> ___
> 389-users mailing list -- 389-users@lists.fedoraproject.org
> To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org/message/DXDJ6SVVR74QN6XJ25H6EQTHI4JLF42T/

-- 



Patrick Landry 
Director, UCSS 
University of Louisiana at Lafayette 
patrick.lan...@louisiana.edu 
___
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org/message/3M4FAD37YMU63GUFMKY6AYDLWIHIPUCX/


[389-users] Re: Attempting to make memberUID searches case insensitive

2018-08-07 Thread William Brown
On Tue, 2018-08-07 at 16:52 -0500, Patrick Landry wrote:
> I am attempting to create an index which will allow searches on the
> memberUID
> attribute to be case insensitive. Using the 389-console, I created an
> Additional Index
> for memberuid and added "caseIgnoreIA5Match" as a Matching Rule. This
> did not
> produce the desired result. 

It would be best to see your complete index definition from cn=config
for memberUID. I think something like: 

ldapsearch -b cn=config -D "cn=Directory Manager" ... '(cn=memberuid)' 

would suffice to find the index rules.

> 
> Initially I would simply like to know if what I am asking for is
> possible. From reading
> the docs it seems it should be. I am able to force a
> caseIgnoreIA5Match by using an
> extensible match search filter.

It seems like a reasonable request IMO. 

> 
> Once I know it is possible and that I am following the correct
> procedure then I can
> provide as much detail as necessary to assist in debugging.
> 
> 
-- 
Sincerely,

William
___
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org/message/DXDJ6SVVR74QN6XJ25H6EQTHI4JLF42T/