Merge lp:~ahasenack/serverguide/samba-indexes-1603540 into lp:serverguide/trunk

[Andreas Hasenack]

Fix proposed samba indexes to avoid duplication errors.

Fix proposed samba indexes to avoid duplication errors.

If you follow the step "Samba indices", and after you change the backend to mdb (that needs to be fixed all over the place and I will open a separate bug about that), you will get duplicate index errors.

That's because out of the box the package already gives you a few:
olcDbIndex: objectClass eq
olcDbIndex: cn,uid eq
olcDbIndex: uidNumber,gidNumber eq
olcDbIndex: member,memberUid eq

We should only add the indexes we need, but that's a bit complicated because you can't modify an existing "cn,uid eq" to "cn,uid eq,sub" (i.e., add "sub") without removing the index first.

An ldapmodify command to do that can be easily constructed, but I think that could get brittle with time because it would depend on the existing indexes the package gives you: if the maintainer decided to change that set, the instructions in the guide would start failing again.

Therefore I propose here to do a bulk index replacement via a "changetype: modify" followed by "replace: olcDbIndex". If this were done on a populated DIT, that would be a very expensive operation, because everything would be reindexed (I'm not sure if openldap knows that an index is being replaced by itself), but this guide assumes a fresh install of slapd, so I think we are good. I took care to merge the existing indexes you get after package installation with the ones we need for samba.

Other changes I did:
- I removed the "pres" index as the openldap admin guide basically says it's seldom useful (http://www.openldap.org/doc/admin24/tuning.html#Presence indexing).
- I added "eq" to the default index type, I think it's the most basic and used one
- grouped indexes of the same type in the same line to make this excerpt a bit shorter

[Doug Smythies (dsmythies)]

O.K. thanks.

(in general, I'll have to take your word for it on the actual content changes, as I do not know.)

review: Approve

=== modified file 'serverguide/C/network-auth.xml'
--- serverguide/C/network-auth.xml	2017-05-09 14:13:52 +0000
+++ serverguide/C/network-auth.xml	2017-05-09 19:24:01 +0000
@@ -2412,21 +2412,21 @@
 	</para>
 
 <programlisting>
-dn: olcDatabase={1}hdb,cn=config
+dn: olcDatabase={1}mdb,cn=config
 changetype: modify
-add: olcDbIndex
-olcDbIndex: uidNumber eq
-olcDbIndex: gidNumber eq
+replace: olcDbIndex
+olcDbIndex: objectClass eq
+olcDbIndex: uidNumber,gidNumber eq
 olcDbIndex: loginShell eq
-olcDbIndex: uid eq,pres,sub
-olcDbIndex: memberUid eq,pres,sub
-olcDbIndex: uniqueMember eq,pres
+olcDbIndex: uid,cn eq,sub
+olcDbIndex: memberUid eq,sub
+olcDbIndex: member,uniqueMember eq
 olcDbIndex: sambaSID eq
 olcDbIndex: sambaPrimaryGroupSID eq
 olcDbIndex: sambaGroupType eq
 olcDbIndex: sambaSIDList eq
 olcDbIndex: sambaDomainName eq
-olcDbIndex: default sub
+olcDbIndex: default sub,eq
 </programlisting>
 
 	<para>
@@ -2443,7 +2443,7 @@
 
 <screen>
 <command>sudo ldapsearch -Q -LLL -Y EXTERNAL -H \
-ldapi:/// -b cn=config olcDatabase={1}hdb olcDbIndex</command>
+ldapi:/// -b cn=config olcDatabase={1}mdb olcDbIndex</command>
 </screen>
 
     </sect3>