On 01/31/2013 09:33 AM, Picture Book wrote:
As a directory server admin, I need to look at access log and find out who is doing expensive unindexed searchs. So that I can work with ldap clients to optimize search filter and DS indexes.
The way DSEE reports notes=U make it very simple for DS admin to find expensive unindexed searchs.
So how does DSEE make it easier than 389?
Have you tried the logconv.pl script?
----------------------------------------
From: picturebook16@xxxxxxxxxxx
To: 389-users@xxxxxxxxxxxxxxxxxxxxxxx
Subject: RE: notes=U, unindex search? really
Date: Fri, 18 Jan 2013 11:52:22 -0500
----------------------------------------
Date: Fri, 18 Jan 2013 08:53:34 -0700
From: rmeggins@xxxxxxxxxx
To: 389-users@xxxxxxxxxxxxxxxxxxxxxxx
CC: picturebook16@xxxxxxxxxxx
Subject: Re: notes=U, unindex search? really
On 01/18/2013 08:29 AM, Picture Book wrote:
filter="(&(AllowAccess=Y)(uid=bill))"
AllowAccess is unindexed attribute
uid is indexed attribute
access log search result: notes=U
I imagine that directory server will do an indexed search by uid=bill, get the entry and then verify if AllowAccess=Y. To me this kind of search is indexed search.
example:
[18/Jan/2013:10:17:24 -0500] conn=124757 op=1 SRCH base="ou=people,dc=?" scope=1 filter="(&(AllowAccess=Y)(uid=bill))" attrs=ALL
[18/Jan/2013:10:17:24 -0500] conn=124757 op=1 RESULT err=0 tag=101 nentries=1 etime=0 notes=U
etime=0 confirms that this search is fast.
You might imagine that, but that's not how the server works. It parses
the filter, sees that AllowAccess is unindexed, and uses an unindexed
search.
I tried filter="(&(uid=bill)(AllowAccess=Y))". no more "notes=U". It would be great if the server can optimize search filter like I imagine. Because some ldap clients do not allow custom search filter.
Thank you.
--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users
--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users
--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users
