Directory Server indexes improve the performance of searches of Directory Server data. The following table lists the recommended attributes that you should consider indexing for Access Manager (if they are not already indexed).
Table 6–2 Suggested Access Manager Indexes for Directory Server
Attribute |
Index Type |
nsroledn |
Equality, Presence, and Substring |
memberof |
Equality and Presence |
iplanet-am-static-group-dn |
Equality |
iplanet-am-modifiable-by |
Equality |
iplanet-am-user-federation-info-key |
Equality |
sunxmlkeyvalue |
Equality and Substring |
o |
Equality |
ou |
Equality, Presence, and Substring |
sunPreferredDomain |
Equality, Presence, and Substring |
associatedDomain |
Equality, Presence, and Substring |
sunOrganizationAlias |
Equality, Presence, and Substring |
Add indexes using either the Directory Server Console or the ldapmodify command-line utility. Use ldapmodify to load the Access Manager index.ldif file, which is available in the following directory:
Solaris OS: /etc/opt/SUNWam/config/ldif
Linux: /etc/opt/sun/identity/config/ldif
For more information about both the Console and ldapmodify, see Sun Java System Directory Server Enterprise Edition 6.0 Administration Guide.