From 94180e830c15935b7a1b0909df791b50bac9dd94 Mon Sep 17 00:00:00 2001
From: Mark Craig <mark.craig@forgerock.com>
Date: Tue, 09 Jun 2015 14:54:26 +0000
Subject: [PATCH] OPENDJ-2037 Add clarification about unindexed searches
---
opendj-sdk/opendj-server-legacy/src/main/docbkx/server-dev-guide/chap-virtual-attrs-collective-attrs.xml | 8 +++++++-
1 files changed, 7 insertions(+), 1 deletions(-)
diff --git a/opendj-sdk/opendj-server-legacy/src/main/docbkx/server-dev-guide/chap-virtual-attrs-collective-attrs.xml b/opendj-sdk/opendj-server-legacy/src/main/docbkx/server-dev-guide/chap-virtual-attrs-collective-attrs.xml
index fd49d12..8c679b9 100644
--- a/opendj-sdk/opendj-server-legacy/src/main/docbkx/server-dev-guide/chap-virtual-attrs-collective-attrs.xml
+++ b/opendj-sdk/opendj-server-legacy/src/main/docbkx/server-dev-guide/chap-virtual-attrs-collective-attrs.xml
@@ -62,7 +62,13 @@
<para>
Since you do not index virtual attributes,
- generally avoid searches that use a simple filter with a virtual attribute.
+ searching on a virtual attribute can result in an unindexed search.
+ For an unindexed search OpenDJ directory server
+ potentially has to go through all entries to look for candidate matches.
+ Looking through all entries is resource-intensive for large directories.
+ By default, OpenDJ directory server allows only the Directory Manager superuser
+ to perform unindexed searches.
+ Generally avoid searches that use a simple filter with a virtual attribute.
Instead, consider the alternatives.
For example, you can assign a password policy to a group
as described in the procedure,
--
Gitblit v1.10.0