On 01/31/2013 09:33 AM, Picture Book wrote:
As a directory server admin, I need to look at access log and find out who is
doing expensive unindexed searchs. So that I can work with ldap clients to
optimize search filter and DS indexes.
The way DSEE reports notes=U make it very simple for DS admin to find expensive
unindexed searchs.
So how does DSEE make it easier than 389?
Have you tried the logconv.pl script?
----------------------------------------
From: pictureboo...@hotmail.com
To: 389-us...@lists.fedoraproject.org
Subject: RE: [389-users] notes=U, unindex search? really
Date: Fri, 18 Jan 2013 11:52:22 -0500
----------------------------------------
Date: Fri, 18 Jan 2013 08:53:34 -0700
From: rmegg...@redhat.com
To: 389-us...@lists.fedoraproject.org
CC: pictureboo...@hotmail.com
Subject: Re: [389-users] notes=U, unindex search? really
On 01/18/2013 08:29 AM, Picture Book wrote:
filter="(&(AllowAccess=Y)(uid=bill))"
AllowAccess is unindexed attribute
uid is indexed attribute
access log search result: notes=U
I imagine that directory server will do an indexed search by uid=bill, get the
entry and then verify if AllowAccess=Y. To me this kind of search is indexed
search.
example:
[18/Jan/2013:10:17:24 -0500] conn=124757 op=1 SRCH base="ou=people,dc=?" scope=1
filter="(&(AllowAccess=Y)(uid=bill))" attrs=ALL
[18/Jan/2013:10:17:24 -0500] conn=124757 op=1 RESULT err=0 tag=101 nentries=1
etime=0 notes=U
etime=0 confirms that this search is fast.
You might imagine that, but that's not how the server works. It parses
the filter, sees that AllowAccess is unindexed, and uses an unindexed
search.
I tried filter="(&(uid=bill)(AllowAccess=Y))". no more "notes=U". It would be
great if the server can optimize search filter like I imagine. Because some ldap clients do not allow
custom search filter.
Thank you.
--
389 users mailing list
389-us...@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users
--
389 users mailing list
389-us...@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users
--
389 users mailing list
389-us...@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users
