Search threshold and index strange thinks..

Question

Hi,
I have a directory server 6.2 server with 60000 entries, the DS is used by lot of applications running in our environment. I have half of query that return in the access/error Logs that the search was unindexed. At the moment I have all the DB in cache and the threshold is set to 30000(very high).To understand better the problem, I have set the error log level to err-function-calls, so I have all the information we need for trouble shutting.
Problem:
If I perform an ldapsearch like this:
ldapsearch -h 10.248.156.52 -p 20389 -D "cn=dmanager" -w - -b "ou=people,dc=unicredito,dc=it" '(&(sn=pippo*)(givenname=*))'
the search is done in the correct way(the search was indexed)
but if I try to do this search(the one used by our application):
ldapsearch -h 10.248.156.52 -p 20389 -D "cn=dmanager" -w - -b "ou=people,dc=unicredito,dc=it" '(&(givenname=*)(sn=pippo*)(usorganizationcode=US))
the search return notes=U in the access Log, and in the error I saw that the DS first try to mach :
usorganizationcode=US and givenname
the result was all identries need to be scanned ,the DS seems to ignore the (sn=pippo*), the threshold limit was exceed and the search consume lot of CPU and RAM.
So I want to know, how can I perform a search with this kind of filter:
(&(givenname=*)(sn=pippo*)(usorganizationcode=US))
by using indexes and cache ? It is possible ?
Regards Fabrizio

Answer 1

Hi Fabrizio,
we had a similar issue, searches with 3 filter elements were unindexed when the first 2 filter elements could not be used for the search. We have a hotfix for it, if you have a valid support contract you should be able to get it (if it's the same issue). The bug ID is 6527909.
Regards,
Holger