Adding Access Manager Indexes to Directory Server (Sun Java Enterprise System 2005Q4 Installation Guide for UNIX)

Sun Java Enterprise System 2005Q4 Installation Guide for UNIX

Adding Access Manager Indexes to Directory Server

Directory Server indexes improve the performance of searches of Directory Server data. The following table lists the recommended attributes that you should consider indexing for Access Manager (if they are not already indexed).

Table 6–2 Suggested Access Manager Indexes for Directory Server


Attribute	Index Type
`nsroledn`	Equality, Presence, and Substring
`memberof`	Equality and Presence
`iplanet-am-static-group-dn`	Equality
`iplanet-am-modifiable-by`	Equality
`iplanet-am-user-federation-info-key`	Equality
`sunxmlkeyvalue`	Equality and Substring
`o`	Equality
`ou`	Equality, Presence, and Substring
`sunPreferredDomain`	Equality, Presence, and Substring
`associatedDomain`	Equality, Presence, and Substring
`sunOrganizationAlias`	Equality, Presence, and Substring

Add indexes using either the Directory ServerConsole or the ldapmodify command-line utility. Use ldapmodify to load the Access Managerindex.ldif file, which is available in the following directory:

For Solaris OS: /etc/opt/SUNWam/config/ldif
For Linux: /etc/opt/sun/identity/config/ldif

For more information about both the Console and ldapmodify, see Chapter 10 of the Sun Java System Directory Server 5 2005Q1 Administration Guide.