Right now we depend on unindexed searches to make some ldap tools work, e.g. ldaplist and OpenStackManager. Probably those tools should be changed to do indexed searches and the unindexed-search priv removed from proxy-agent and possibly novaadmin as well.
Version: unspecified
Severity: normal