0c57ce7 Create indexes for altSecurityIdentities and ipaCertmapData attributes

Authored and Committed by abbra 4 years ago
    Create indexes for altSecurityIdentities and ipaCertmapData attributes
    
    During an investigation into filter optimisation in 389DS it was
    discovered that two attributes of the certmap query are unindexed.
    Due to the nature of LDAP filters, if any member of an OR query is
    unindexed, the entire OR becomes unindexed.
    
    This is then basically a full-table scan, which applies the filter test
    to the contained members.
    
    Fixes: https://pagure.io/freeipa/issue/7932
    Fixes: https://pagure.io/freeipa/issue/7933
    Reviewed-By: Florence Blanc-Renaud <flo@redhat.com>
    
        
file modified
+16 -0