Title: #5157: Use single update LDIF for indices and add more indices
## Use single update LDIF for indices
Index definitions were split across four files. indices.ldif contained
the initial subset of indices. Three update files partly duplicated the
indices and partly added new indices.
All indices are now defined in a single update file that is sorted
The changeset avoids two additional index tasks and reduces installation
time by 5 to 10 seconds.
## Add more indices
ipaCASubjectDN is used by lightweight sub CA feature.
ipaExternalMember is used by ipasam code to assemble MS-PAC records.
ipaNTSecurityIdentifier was only index for "pres" and was missing an
index on "eq". Samba performs queries with SID string.
memberPrincipal is used by S4U2Proxy constrained delegation and by
Also note that dnaHostname, ipServiceProtocol, ipaCertSubject, and
ipaKeyUsage are currently not index because an index would rarely used
or have a poor selectivity.
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5157/head:pr5157
git checkout pr5157