Re: index and debug issues

[Dusty Doris <openldap@mail.doris.cc>]

On Wed, 1 Dec 2004, FRLinux wrote:

> Hello,
>
> I am running openldap 2.1.30 from Debian sid (unstable) since a couple
> of months but    just noticed that /var/log/debug is filling quite
> quickly. To give you an example, in an hour and a half running slapd,
> debug get 400000+ entries with the line daemon. An example of logs is
> pasted below. Notice the index failed line, still in that hour and a
> half, i have been getting 8000+ messages containing an index failed
> error.
>
> So has anyone met that problem before ? I have been searching for
> about 24 hours without having been able to find a solution.  There are
> currently about 51 concurrent connections (which i think is not a
> lot).
>
> arkangel slapd[4461]: daemon: removing 67
> arkangel slapd[4461]: daemon: select: listen=6 active_threads=0 tvp=NULL
> arkangel slapd[4461]: daemon: select: listen=7 active_threads=0 tvp=NULL
> arkangel slapd[4461]: daemon: select: listen=8 active_threads=0 tvp=NULL
> arkangel slapd[4461]: daemon: select: listen=9 active_threads=0 tvp=NULL
> arkangel slapd[4461]: daemon: activity on 1 descriptors
> arkangel slapd[4461]: daemon: select: listen=6 active_threads=0 tvp=NULL
> arkangel slapd[4461]: daemon: select: listen=7 active_threads=0 tvp=NULL
> arkangel slapd[4461]: daemon: select: listen=8 active_threads=0 tvp=NULL
> arkangel slapd[4461]: daemon: select: listen=9 active_threads=0 tvp=NULL
> arkangel slapd[4461]: daemon: activity on 1 descriptors
> arkangel slapd[4461]: daemon: activity on:
> arkangel slapd[4461]:  27r
> arkangel slapd[4461]:
> arkangel slapd[4461]: daemon: read activity on 27
> arkangel slapd[4462]: <= bdb_equality_candidates: (cn) index_param failed (18)

It means that cn isn't indexed.

Add this to your index definitions in slapd.conf

index	cn	eq

Then shutdown slapd

re index your database

$ slapindex

cd to where your db files are and make sure the new cn index file is owned
by the correct user that slapd runs as.  Just do an ls and see what the
other files look like

ie:

cd /var/db/openldap-data
chown ldap:ldap cn.bdb

restart slapd

See if that clears it up for you.  Should also speed up your searches on
cn.