$ bin/rebuild-index --baseDN dc=example,dc=com --index objectclass
groupOfEntriesentries, or 4000
groupOfURLsentries), then you may want to increase the index entry limit for the
objectClassattribute so that it has a value larger than the maximum number of group entries of each type. Set
index-entry-limitproperty using a command line like the following:
$ bin/dsconfig set-local-db-index-prop --backend-name userRoot \ --index-name objectClass --set index-entry-limit:175000
As an alternative, a separate backend may be created to hold these group entries, so that an unindexed search in that backend yields primarily group entries. If you make no changes, then the internal search performed at startup to identify all groups and any user searches looking for groups of a given type may be very expensive.
For directories in which any single user may be a member of more than 4000 static groups of
the same type, you may need to increase the index entry limit for the
uniqueMember attribute to a value larger than the maximum number of
groups in which any user is a member. If you do not increase the limit, then searches to
retrieve the set of all static groups in which the user is a member may be unindexed and
therefore very expensive.