OpenLDAP minor schema modification
-
- UpdatedJan 30, 2025
- 1 minute read
- Yokohama
- Platform Security
In OpenLDAP 2.3 systems that use the back-bdb (Berkley backend), administrators make a minor modification to their schema to facilitate the integration.
In OpenLDAP 2.3, back-bdb has limited support for inequality indexing (ordering). It is implemented only for generalizedTime and ChangeSequenceNumber syntax. It cannot be supported on syntax that support substrings. Search filters containing inequalities are processed using the presence index.
We recommend creating a custom attribute for this purpose, instead of changing what is already indexed or present in the schema (for example, servnowid).