[Freeipa-devel] [PATCHES 00012-0013 v7] Profiles and CA ACLs
Martin Kosek
mkosek at redhat.com
Mon Jun 8 06:49:06 UTC 2015
On 06/08/2015 03:31 AM, Fraser Tweedale wrote:
> New patches attached. Comments inline.
Thanks Fraser!
...
>> 5)
>> Missing referint plugin configuration for attribute
>> 'ipacaaclmembercertprofile'
>> Please add it into install/updates/25-referint.update (+ other member
>> attributes if missing)
>>
> Added this. There is a comment in 25-referint.update:
>
> # pres and eq indexes defined in 20-indices.update must be set
> # for all the attributes
>
> Can you explain what is required here? Is it just to add: I see
> things for memberUser and memberHost in indices.ldif but nothing for
> memberService. Do I need to add to indices.ldif:
>
> dn: cn=memberProfile,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config
> changetype: add
> cn: memberProfile
> ObjectClass: top
> ObjectClass: nsIndex
> nsSystemIndex: false
> nsIndexType: eq
> nsIndexType: pres
> nsIndexType: sub
>
> , and similarly for memberCa? Sorry I do not know much about LDAP
> indexing.
AFAIR, yes. BTW, where does the "sub" index come from? It is quite an expensive
index to use and I now cannot think of memberProfile search where you would
need a substring...
Thanks,
Martin
More information about the Freeipa-devel
mailing list