The KDC is doing a lot of unindexed queries for ipakrbprincipalalias:
(&(|(objectclass=krbprincipalaux)(objectclass=krbprincipal)(objectclass=ipakrbprincipal))(|(ipakrbprincipalalias=ldap/pinto.example.com@example.com)(krbprincipalname=ldap/pinto.example.com@example.com)))
When adding the index as an update verify that the index is created. I have the feeling we only create an index task on existing indices when doing an update.
This one is critical since it is used by the ipa_kdb driver.
Also consider adding managedby and ipakrbauthzdata at the same time.
Ticket has been cloned to Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=852474
Discovered when analyzing logconv.pl output.
Generated with:
I am already adding this exact index in scope of #3020 where I hit the same issue when analyzing our unindexed searches.
Replying to [comment:1 rcritten]:
This issue got improved in my patch 2ecfe57 (ticket #2866) where I fixed the way we produce index tasks.
master:[[br]] 941d1e8[[br]] 0e432d3
ipa-3-0:[[br]] 20f1820[[br]] 1f60d17
Rename component.
Metadata Update from @rcritten: - Issue assigned to mkosek - Issue set to the milestone: FreeIPA 3.0 RC2
Login to comment on this ticket.