HP-UX Directory Server 8.1 administrator guide

The nsds5ReplConflict attribute is already indexed for presence and equality, but for
performance reasons, if there are many conflicting entries every day, index the
nsds5ReplConflict attribute in other indexes. For information on indexing, see
Chapter 11 “Managing indexes”.
This section contains the procedures for the following conflict resolution procedures:
• “Solving naming conflicts”
• “Solving orphan entry conflicts”
• “Solving potential interoperability problems”
8.18.1 Solving naming conflicts
When two entries are created with the same DN on different servers, the automatic conflict
resolution procedure during replication renames the last entry created, including the entry's
unique identifier in the DN. Every directory entry includes a unique identifier given by the
operational attribute nsuniqueid. When a naming conflict occurs, this unique ID is appended
to the non-unique DN.
For example, the entry uid=adamss,ou=people,dc=example,dc=com is created on Server
A at time t1 and on Server B at time t2, where t2 is greater (or later) than t1. After replication,
Server A and Server B both hold the following entries:
• uid=adamss,ou=people,dc=example,dc=com (created at time t1)
• nsuniqueid=66446001-1dd211b2+uid=adamss,dc=example,dc=com (created at
time t2)
The second entry needs to be renamed in such a way that it has a unique DN. The renaming
procedure depends on whether the naming attribute is single-valued or multivalued.
8.18.1.1 Renaming an entry with a multivalued naming attribute
To rename an entry that has a multivalued naming attribute:
1. Rename the entry using a new value for the naming attribute, and keep the old RDN. For
example:
ldapmodify -D "cn=directory manager" -w secret -p 389 -h server.example.com
dn: nsuniqueid=66446001-1dd211b2+uid=adamss,dc=example,dc=com
changetype: modrdn
newrdn: uid=NewValue
deleteoldrdn: 0
2. Remove the old RDN value of the naming attribute and the conflict marker attribute. For
example:
ldapmodify -D "cn=directory manager" -w secret -p 389 -h server.example.com
dn: uid=NewValue,dc=example,dc=com
changetype: modify
delete: uid
uid: adamss
-
delete: nsds5ReplConflict
-
NOTE:
The unique identifier attribute nsuniqueid cannot be deleted.
For more information on the ldapmodify command, see “Managing entries from the command
line” and the HP-UX Directory Server configuration, command, and file reference.
The Console does not support editing multivalued RDNs. For example, if there are two servers
in a multi-master mode, an entry can be created on each server with the same user ID, then the
new entries' RDN changed to the nsuniqueid uid value. Attempting to modify this entry
from the Console returns the error
8.18 Solving common replication conflicts 387