LDAP, FreeRadius, and Schema

[Dusty Doris]

> Well, most of our email accounts are in a different organizational unit,
> and they use posixAccount (so based off of uid).  However, our radius
> organizational unit is separate ... and I'm now using type "account" with
> cn's.  You're saying this is ok?
Its probably fine.

>
> The only reason I was complaining about indexing is because in the
> organizational unit that managed the email accounts uses the cn value for
> full name .... so I was indexing the full name without being needed.
>

That's ok.  Your just indexing with eq anyway, correct?  If you were doing 
substring indexes as well it would be a little more load, but I usually 
err on the side of having too much indexed.  But we run pretty good sized 
ldap servers anyway.