Re: LDAP, FreeRadius, and Schema

Well, most of our email accounts are in a different organizational unit, and they use posixAccount (so based off of uid). However, our radius organizational unit is separate ... and I'm now using type "account" with cn's. You're saying this is ok? Its probably fine.

The only reason I was complaining about indexing is because in the organizational unit that managed the email accounts uses the cn value for full name .... so I was indexing the full name without being needed.

That's ok. Your just indexing with eq anyway, correct? If you were doing substring indexes as well it would be a little more load, but I usually err on the side of having too much indexed. But we run pretty good sized ldap servers anyway.