Red Hat Directory Server 8.0 Administrator's Guide

(targetfilter="(!(nsds5ReplConflict=*))")(version 3.0;acl
"Anonymous read-search access";allow (read, search, compare)
(userdn="ldap:///anyone");)
> -
The new ACI filters out all entries that contain the nsds5ReplConflict attribute from search
results.
For more information on the ldapmodify command, see Section 2, “Managing Entries from the
Command-Line” and the Directory Server Configuration, Command, and File Reference.
19. Troubleshooting Replication-Related Problems
This section lists some error messages, explains possible causes, and offers remedies.
It is possible to get more debugging information for replication by setting the error log level to
8192, which is replication debugging. See Section 19, “Troubleshooting Replication-Related
Problems”.
To change the error log level to 8192, run the following ldapmodify command:
dn: cn=config
changetype: modify
replace: nsslapd-errorlog-level
nsslapd-errorlog-level: 8192
Because log level is additive, running the above command will result in excessive messages in
the error log. So, use it judiciously.
To turn off replication debugging log, set the same attribute to 0.
The cl-dump.pl script, which is explained in detail in the Directory Server Configuration,
Command, and File Reference can also help troubleshoot replication-related problems.
Depending on the usage options, the script can selectively dump a particular replica:
• Dump the contents of a replication-change-log file and in-memory variables purge RUV
and maxRUV.
• Grep and interpret change sequence numbers (CSNs) in the changelog.
• Get the base-64 encoded changelog from the Directory Server, and then decode the
changelog.
Many common replication problems are described in Table 8.7, “Replication Errors”.
Error/Symptom Reason Impact Remedy
agmt=%s (%s:%d) The consumer The local supplier will Ignore this message if
Troubleshooting Replication-Related
347