cd docker
docker compose up -d

docker compose logs -f

...
INFO: IMPORTANT: Set cn=Directory Manager password to "xyz. a very long password"`
...

docker exec 389ds dsconf localhost config replace nsslapd-maxbersize=4194304
docker exec 389ds dsconf localhost config replace nsslapd-maxsasliosize=4194304
docker exec 389ds dsconf localhost config replace nsslapd-allow-anonymous-access=off
docker exec 389ds dsconf localhost config replace nsslapd-dynamic-plugins=on
docker exec 389ds dsconf localhost plugin memberof enable

docker exec 389ds dsconf localhost config get

#
# optional: disable syntax check if syntax errors on source are not correctable
#
docker exec 389ds dsconf localhost config replace nsslapd-syntaxcheck=off

#
# optional: change Directory Manager password
#
docker exec 389ds dsconf localhost config replace nsslapd-rootpw=<new password>

#
# optional: import existing server certificate
#
cp server.key server.crt ./data
docker exec 389ds dsctl localhost tls import-server-key-cert /data/server.crt /data/server.key
docker exec 389ds dsconf localhost security certificate list
rm ./data/server.key ./data/server.crt

#
# optional: change ports to standard 389/636
#
docker exec 389ds dsconf localhost config replace nsslapd-port=389
docker exec 389ds dsconf localhost config replace nsslapd-securePort=636

docker compose stop

cp ../schema/* ./data/config/schema

docker compose start

docker exec 389ds dsconf localhost plugin attr-uniq set --enabled on --attr-name uid mail mailAlternateAddress --subtree "dc=sonia,dc=de" --across-all-subtrees on "attribute uniqueness"
docker exec 389ds dsconf localhost plugin attr-uniq show "attribute uniqueness"

docker exec 389ds dsconf localhost backend create --suffix="dc=sonia,dc=de" --create-suffix --be-name="sonia"

cd ..
mvn clean package
cp -p target/ldapmigration.jar .
./ldapmigration.jar -i

# update indexes
docker exec 389ds dsconf localhost backend index set --attr givenName --add-type approx sonia
docker exec 389ds dsconf localhost backend index set --attr mail --add-type approx sonia
docker exec 389ds dsconf localhost backend index set --attr mailAlternateAddress --add-type pres --add-type sub --add-type approx sonia
docker exec 389ds dsconf localhost backend index set --attr uid --add-type pres --add-type sub sonia

# add indexes
docker exec 389ds dsconf localhost backend index add --attr departmentNumber --index-type eq --index-type pres sonia
docker exec 389ds dsconf localhost backend index add --attr displayName --index-type eq --index-type pres sonia
docker exec 389ds dsconf localhost backend index add --attr employeeNumber --index-type eq --index-type pres sonia
docker exec 389ds dsconf localhost backend index add --attr employeetype --index-type eq --index-type pres sonia
docker exec 389ds dsconf localhost backend index add --attr facsimileTelephoneNumber --index-type eq --index-type pres --index-type sub sonia
docker exec 389ds dsconf localhost backend index add --attr gecos --index-type eq --index-type pres --index-type sub sonia
docker exec 389ds dsconf localhost backend index add --attr gidnumber --index-type eq --index-type pres sonia
docker exec 389ds dsconf localhost backend index add --attr l --index-type eq --index-type pres sonia
docker exec 389ds dsconf localhost backend index add --attr mailDomainStatus --index-type eq --index-type pres sonia
docker exec 389ds dsconf localhost backend index add --attr mailEquivalentAddress --index-type eq --index-type pres --index-type sub --index-type approx sonia
docker exec 389ds dsconf localhost backend index add --attr mailUserStatus --index-type eq --index-type pres sonia
docker exec 389ds dsconf localhost backend index add --attr memberUid --index-type eq --index-type pres sonia
docker exec 389ds dsconf localhost backend index add --attr nsRoleDN --index-type eq --index-type pres sonia
docker exec 389ds dsconf localhost backend index add --attr o --index-type eq --index-type pres sonia
docker exec 389ds dsconf localhost backend index add --attr ou --index-type eq --index-type pres sonia
docker exec 389ds dsconf localhost backend index add --attr uidnumber --index-type eq --index-type pres sonia
...

# list indexes
docker exec 389ds dsconf localhost backend index list sonia

# reindex
docker exec 389ds dsconf localhost backend index reindex sonia

# observe reindexing progress in log
docker logs -f 389ds

#
# roughly estimated for an LDAP instance with 120000 entries.
#

# search size limit: specifies the maximum number of entries to return from a search operation
docker exec 389ds dsconf slapd-localhost config replace nsslapd-sizelimit=50000

# Index Scan Limit: specifies the maximum number of entry IDs loaded from an index file for search results, it can make a search treated as an unindexed.
docker exec 389ds dsconf slapd-localhost backend config set --idlistscanlimit=50000

# Lookthrough Limit: specifies how many entries are examined for a search operation
docker exec 389ds dsconf slapd-localhost backend config set --lookthroughlimit=50000

# configure error log to keep maximum 5 logs and to rotate log files with a 100 MB size or every 1 week, enter:
docker exec 389ds dsconf localhost config replace nsslapd-errorlog-maxlogsperdir=5 nsslapd-errorlog-maxlogsize=100 nsslapd-errorlog-logrotationtime=1 nsslapd-errorlog-logrotationtimeunit=week
docker exec 389ds dsconf slapd-localhost config get | grep -i errorlog

# configure access log to keep maximum 10 logs and to rotate log files with a 100 MB size or every 1 week, enter:
docker exec 389ds dsconf localhost config replace nsslapd-accesslog-maxlogsperdir=10 nsslapd-accesslog-maxlogsize=100 nsslapd-accesslog-logrotationtime=1 nsslapd-accesslog-logrotationtimeunit=week
docker exec 389ds dsconf slapd-localhost config get | grep -i accesslog