Bug 55412 - remove employeeNumber from default search filters as it is not indexed
remove employeeNumber from default search filters as it is not indexed
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: UMC - Users
UCS 5.0
Other Linux
: P5 normal (vote)
: UCS 5.0-2-errata
Assigned To: Florian Best
Iván.Delgado
https://git.knut.univention.de/univen...
:
Depends on: 48945
Blocks:
  Show dependency treegraph
 
Reported: 2022-11-10 15:49 CET by Florian Best
Modified: 2022-11-22 11:39 CET (History)
5 users (show)

See Also:
What kind of report is it?: Development Internal
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?: Yes
School Customer affected?: Yes
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional): UCS Performance, Usability
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Florian Best univentionstaff 2022-11-10 15:49:39 CET
(In reply to Florian Best from comment #1)
> The problem could also be missing indicies.
> E.g. searching in users/user by default searches in multiple properties:
> also in `employeeNumber` with a search filter like
> (|(employeeNumber=foo)(employeeNumber=*foo*)). But employeeNumber is only
> indexed for subsearches, not equality or presence.
> 
> management/univention-ldap/scripts/ldap_setup_index:
> 260 »   'eq': UDM_PROP_ATTRS | set((
> …
> 313 »   )),
> 314 »   'pres': UDM_PROP_ATTRS | set((
> …
> 350 »   )), 
> 351 »   'sub': set((
> …
> 359 »   »   'employeeNumber',
> …
> 379 »   )),
> 
> At least this happened in a larger customer environment.

→ we should remove employeeNumber from the default search attributes to gain some performance.
If customers wish to use it for default search they can enable it again via:

ucr set directory/manager/web/modules/users/user/properties/employeeNumber/include_in_default_search=true

and add it to the equality and presence index.

+++ This bug was initially created as a clone of Bug #48945 +++
Comment 1 Florian Best univentionstaff 2022-11-11 14:29:02 CET
employeNumber has been removed from the default search attributes.
It can manually be activated via UCR if necessary (directory/manager/web/modules/users/user/properties/employeeNumber/include_in_default_search).

univention-directory-manager-modules.yaml
fdebc872b346 | perf(udm users): remove "employeeNumber" from default search properties in users/

univention-directory-manager-modules (15.0.13-21)
fdebc872b346 | perf(udm users): remove "employeeNumber" from default search properties in users/
Comment 2 Iván.Delgado univentionstaff 2022-11-14 16:35:33 CET
Verified:
 * Checked that the default query no longer contains the employeeNumber.