Репликация и конфликты в LDAP-сервере: обнаружение и разрешение
Павел Полежаев













Exported on 2025-11-20 13:38:06
Table of Contents
1
2 Введение в репликацию LDAP
3 Типы конфликтов репликации
4 Обнаружение конфликтов репликации
5 Разрешение конфликтов
5.1 1. Ошибки типа "namingConflict (ADD)"
5.2 2. Другие типы конфликтов
6 Проверка работы репликации
7 Диагностика проблем репликации
8 Подготовка тестовой среды
9 Этап 1: Создаем namingConflict (ADD)
10 Этап 2: Создаем attribute/modification конфликт
11 Результат:
12 Практическое решение проблем репликации
13 Реинициализация реплики
13.1 Почему сразу не делать реинициализацию?
13.2 Что проверять при сравнении данных после реинициализации?
14 Полезные команды
15 Заключение
16 Моделирование ошибок репликации
16.1 Подготовка тестовой среды
16.2 Этап 1: Создаем namingConflict (ADD)
16.3 Этап 2: Создаем attribute/modification конфликт
16.4 Результат:

• Введение в репликацию LDAP
• Типы конфликтов репликации
• Обнаружение конфликтов репликации
• Разрешение конфликтов
  • 1. Ошибки типа "namingConflict (ADD)"
  • 2. Другие типы конфликтов
• Проверка работы репликации
• Диагностика проблем репликации
• Подготовка тестовой среды
• Этап 1: Создаем namingConflict (ADD)
• Этап 2: Создаем attribute/modification конфликт
• Результат:
• Практическое решение проблем репликации
• Реинициализация реплики
  • Почему сразу не делать реинициализацию?
  • Что проверять при сравнении данных после реинициализации?
• Полезные команды
• Заключение

Введение в репликацию LDAP

Класс — это шаблон объектов (например, `inetOrgPerson`, `posixAccount`), определяющий обязательные (`MUST`) и допустимые (`MAY`) атрибуты для описания сущностей (пользователей, групп, устройств) в каталоге.
Атрибут — это именованное свойство объекта в LDAP (например, `uid`, `cn`, `mail`), хранящее данные (логин, имя, email) и их метаданные (синтаксис, правила сопоставления).
Схема данных в LDAP — это набор правил, определяющих структуру каталога, включая допустимые классы объектов (например, `user`, `group`), их атрибуты (например, `cn`, `uid`) и ограничения на значения (типы данных, уникальность, обязательность).|

Типы конфликтов репликации

При работе с репликацией могут возникать различные типы конфликтов:

1. Naming conflicts (ADD) - возникают при попытке добавить запись с DN, который уже существует в каталоге
2. Attribute conflicts - различия в атрибутах одной и той же записи на разных серверах
3. Modification conflicts - одновременное изменение одной записи на разных серверах

Обнаружение конфликтов репликации

Для проверки наличия конфликтов выполните команду:

Эта команда выведет список всех записей, участвующих в конфликтах репликации.

Разрешение конфликтов

1. Ошибки типа "namingConflict (ADD)"

Для конфликтов добавления рекомендуется сохранять валидные записи и удалять конфликтующие:

Валидными считаются записи:

• Созданные корректным образом (через официальные API или UI)
• Имеющие все обязательные атрибуты
• Соответствующие схеме данных
• Принадлежащие "авторитетному" серверу (обычно первому КД в топологии)

Как определить:

1. Сравните конфликтующие записи:

   dsconf ldap://<имя_КД> -D "cn=Directory Manager" repl-conflict compare <dn конфликтующей записи>

2. Проверьте временные метки (атрибут modifyTimestamp)
3. Учитывайте бизнес-логику (какая запись реально используется)

2. Другие типы конфликтов

Ситуации, где:

• Конфликт затрагивает критичные данные (например, учётные записи администраторов)
• Несколько атрибутов одновременно расходятся между репликами
• Автоматическое разрешение может нарушить целостность данных
• Конфликт затрагивает связанные записи (например, группы и их members)

Пример: Одновременное изменение номера телефона пользователя на двух разных КД, где оба изменения технически корректны, но нужно выбрать актуальное.
Для таких случаев используйте поэтапный подход:

• Сравните конфликтующие записи:

  dsconf ldap://<имя_КД> -D "cn=Directory Manager" repl-conflict compare <dn конфликтующей записи>

• Примите решение:
  • Удалить конфликтующую запись (как выше)
  • Или сделать ее действующей:

    dsconf ldap://<имя_КД> -D "cn=Directory Manager" repl-conflict swap <dn конфликтующей записи>

    Проверка работы репликации

    После разрешения конфликтов убедитесь в корректной работе репликации:
• Создайте тестовую запись или измените атрибут существующей, например создайте пользователя через Портал управления.
• Выполните глубокую проверку репликации:

  ds-replcheck online -D "cn=Directory Manager" -W -m ldap://<имя_первого_КД>:389 -r ldap://<имя_реплики>:389 -b <доменный_суффикс> -i memberof,idnssoaserial,entryusn,krblastsuccessfulauth,krblastfailedauth,krbloginfailedcount

  Данная проверка, это сравнение не только базовых атрибутов, но и:
• Служебных метаданных (entryusn, modifyTimestamp)
• Вторичных индексов (memberof)
• Критичных для безопасности атрибутов (krblastfailedauth)
• DNS-зон (idnssoaserial)

Чем отличается от обычной проверки: Обычный ldapsearch или dsconf показывает только данные, тогда как ds-replcheck анализирует внутренние механизмы репликации.

Диагностика проблем репликации

И анализировать логи в /var/log/dirsrv/<имя_инстанса>/errors.
Например /var/log/dirsrv/slapd-EXAMPLE-COM/errors|
Моделирование ошибок описано в раскрывающемся меню: Моделирование ошибок репликации

• Подготовка тестовой среды
• Этап 1: Создаем namingConflict (ADD)
• Этап 2: Создаем attribute/modification конфликт
• Результат:

Подготовка тестовой среды

1. Создадим тестовую OU и пользователя (выполняем команду на 1КД):

   kinit admin suffix=$(ldapsearch -Q -LLL -s base

   grep 'dn: '

   cut -d ' ' -f2) dc=$(hostname -f) domain=$(hostname -d)   ldapadd -h $dc -D "cn=Directory Manager" -W <<EOF dn: ou=test_repl,ou=$domain,cn=orgunits,cn=accounts,$suffix objectClass: rbta-org-unit ou: test_repl displayName: test_repl EOF   ipa user-add testuser \ --first="Test" \ --last="User" \ --random   ldapmodify -h $dc -D "cn=Directory Manager" -W <<EOF dn: uid=testuser,cn=users,cn=accounts,$suffix changetype: modify replace: rbtadp rbtadp: ou=test_repl,ou=$domain,cn=orgunits,cn=accounts,$suffix

• 
  replace: rbtaou
  rbtaou: test_repl
  EOF|
  Code block 1 На КД1

1. Проверим репликацию (выполняем команду на 2КД):

   kinit admin suffix=$(ldapsearch -Q -LLL -s base

   grep 'dn: '

   cut -d ' ' -f2) dc=$(hostname -f) domain=$(hostname -d) ldapsearch -h $dc -D "cn=Directory Manager" -W -b "ou=test_repl,ou=$domain,cn=orgunits,cn=accounts,$suffix"

   
   

   Этап 1: Создаем namingConflict (ADD)

• Остановим репликацию (выполняем команды на обоих серверах):

  read -p "Введите короткое доменное имя 2 КД (например dc02): " DC2 domain=$(hostname -d) dc=$(hostname -f) suffix=$(ldapsearch -Q -LLL -s base

  grep 'dn: '

  cut -d ' ' -f2) escaped_suffix=$(echo "$suffix"

  sed -e 's/=/ 3D/g' -e 's/,/ 2C/g')   ldapmodify -h $dc -D "cn=Directory Manager" -W <<EOF dn: cn=meTo${DC2}.${domain},cn=replica,cn=${escaped_suffix},cn=mapping tree,cn=config changetype: modify replace: nsDS5ReplicaEnabled nsDS5ReplicaEnabled: off EOF

• Создадим конфликтующую запись (на обоих кд):

  ipa user-add conflict_user \ --first="conflict" \ --last="User" \ --random

  
  
• Включим репликацию:

  read -p "Введите короткое доменное имя 2 КД (например dc02): " DC2 domain=$(hostname -d) dc=$(hostname -f) suffix=$(ldapsearch -Q -LLL -s base

  grep 'dn: '

  cut -d ' ' -f2) escaped_suffix=$(echo "$suffix"

  sed -e 's/=/ 3D/g' -e 's/,/ 2C/g')   ldapmodify -h $dc -D "cn=Directory Manager" -W <<EOF dn: cn=meTo${DC2}.${domain},cn=replica,cn=${escaped_suffix},cn=mapping tree,cn=config changetype: modify replace: nsDS5ReplicaEnabled nsDS5ReplicaEnabled: on EOF

• Проверим конфликты:

  dc=$(hostname -f) suffix=$(ldapsearch -Q -LLL -s base

  grep 'dn: '

  cut -d ' ' -f2) dsconf ldap://$dc -D "cn=Directory Manager" repl-conflict list $suffix

  Пример вывода:

  dn: nsuniqueid=adc2dc01-71ea11f0-816fe86f-aa36b0da+uid=conflict_user,cn=users,cn=accounts,dc=ald250,dc=pro cn: conflicted User displayName: conflicted User gecos: conflicted User gidNumber: 1213300500 givenName: conflicted homeDirectory: /home/conflict_user initials: cU ipaNTSecurityIdentifier: S-1-5-21-196329585-3226835358-3389735258-101500 ipaUniqueID: c173c7be-71ea-11f0-a685-02000a452904 krbCanonicalName: conflict_user@ALD250.PRO krbExtraData:: AAI445Focm9vdC9hZG1pbkBBTEQyNTAuUFJPAA== krbLastPwdChange: 20250805105552Z krbPasswordExpiration: 20250805105552Z krbPrincipalKey:: MIHeoAMCAQGhAwIBAaIDAgEBowMCAQGkgccwgcQwaKAbMBmgAwIBBKESBBBjQjo4PD1ZLVBIfEI0KitroUkwR6ADAgESoUAEPiAAXxsWn7SM64uMNXVBzUsCpN1JZOObIc/h+tt+/vlGqWrfFMcF2en4vgPJJo/qtKx0+886arhXPkdPAv4bMFigGzAZoAMCAQShEgQQNTBRWS07MXNTUFZpcCZVJKE5MDegAwIBEaEwBC4QAFnNxLdgMlcm6rpsMIqgh6CN2IWb/cTk6Jj/sKQYGZkU8KlkJHuelUVz0bSk krbPrincipalName: conflict_user@ALD250.PRO loginShell: /bin/bash mail: conflict_user@ald250.pro mepManagedEntry: cn=conflict_user,cn=groups,cn=accounts,dc=ald250,dc=pro nsds5replconflict: namingConflict (ADD) uid=conflict_user,cn=users,cn=accounts,dc=ald250,dc=pro objectClass: top objectClass: person objectClass: organizationalperson objectClass: inetorgperson objectClass: inetuser objectClass: posixaccount objectClass: krbprincipalaux objectClass: krbticketpolicyaux objectClass: ipaobject objectClass: ipasshuser objectClass: x-ald-user objectClass: x-ald-user-parsec14 objectClass: x-ald-audit-policy objectClass: rbta-unit objectClass: rbta-address objectClass: rbtaCustomUserAttrs objectClass: rbta-inetorgperson-ext objectClass: ruPostMailAccount objectClass: rbtaUserMeta objectClass: ipaSshGroupOfPubKeys objectClass: ldapsubentry objectClass: mepOriginEntry objectClass: ipantuserattrs proxyAddresses: SMTP:CONFLICT_USER@ALD250.PRO rbtadp: ou=ald250.pro,cn=orgunits,cn=accounts,dc=ald250,dc=pro rbtaou: ald250.pro sn: User uid: conflict_user uidNumber: 1213300500 userPassword: {PBKDF2-SHA512}10000$uPEJ8l/mnTsjJkckyxqqJRIQx/X2OrOI$Wzm9wddHKCb9JOLl4UVQLUk/czorLTUqEOYE6QBT/l4t+B+pXgJ8xXrVmkdnKYyREYmXrpf2XyNPsOoEbzbz8A== x-ald-user-mac: 0:0x0:0:0x0 xaldusermacmax: 0 xaldusermacmin: 0 dn: cn=conflict_user+nsuniqueid=adc2dc05-71ea11f0-816fe86f-aa36b0da,cn=groups,cn=accounts,dc=ald250,dc=pro cn: conflict_user description: User private group for conflict_user gidNumber: 1213300500 ipaUniqueID: c1a7f6d8-71ea-11f0-a685-02000a452904 mepManagedBy: uid=conflict_user,cn=users,cn=accounts,dc=ald250,dc=pro nsds5replconflict: namingConflict (ADD) cn=conflict_user,cn=groups,cn=accounts,dc=ald250,dc=pro objectClass: posixgroup objectClass: ipaobject objectClass: mepManagedEntry objectClass: top objectClass: ldapsubentry

  
  
  

  Этап 2: Создаем attribute/modification конфликт

• Снова останавливаем репликацию:

  read -p "Введите короткое доменное имя 2 КД (например dc02): " DC2 domain=$(hostname -d) dc=$(hostname -f) suffix=$(ldapsearch -Q -LLL -s base

  grep 'dn: '

  cut -d ' ' -f2) escaped_suffix=$(echo "$suffix"

  sed -e 's/=/ 3D/g' -e 's/,/ 2C/g')   ldapmodify -h $dc -D "cn=Directory Manager" -W <<EOF dn: cn=meTo${DC2}.${domain},cn=replica,cn=${escaped_suffix},cn=mapping tree,cn=config changetype: modify replace: nsDS5ReplicaEnabled nsDS5ReplicaEnabled: off EOF

• Модифицируем запись по-разному:

  read -p "Введите короткое доменное имя 2 КД (например dc02): " DC2 domain=$(hostname -d) dc=$(hostname -f) suffix=$(ldapsearch -Q -LLL -s base

  grep 'dn: '

  cut -d ' ' -f2)

1. На КД1 изменяем телефон
   ldapmodify -h $dc -D "cn=Directory Manager" -W <<EOF
   dn: uid=testuser,cn=users,cn=accounts,$suffix
   changetype: modify
   replace: telephoneNumber
   telephoneNumber: +111111111
   EOF
    
   
2. На КД2 изменяем email
   ldapmodify -h $5DC2.$domain -D "cn=Directory Manager" -W <<EOF
   dn: uid=testuser,cn=users,cn=accounts,$suffix
   changetype: modify
   replace: mail
   mail: test@example.com
   EOF|

• Включаем репликацию и проверяем:

  read -p "Введите короткое доменное имя 2 КД (например dc02): " DC2 domain=$(hostname -d) dc=$(hostname -f) suffix=$(ldapsearch -Q -LLL -s base

  grep 'dn: '

  cut -d ' ' -f2) escaped_suffix=$(echo "$suffix"

  sed -e 's/=/ 3D/g' -e 's/,/ 2C/g')   ldapmodify -h $dc -D "cn=Directory Manager" -W <<EOF dn: cn=meTo${DC2}.${domain},cn=replica,cn=${escaped_suffix},cn=mapping tree,cn=config changetype: modify replace: nsDS5ReplicaEnabled nsDS5ReplicaEnabled: on EOF

  
  

  read -p "Введите короткое доменное имя 2 КД (например dc02): " DC2 domain=$(hostname -d) dc=$(hostname -f) suffix=$(ldapsearch -Q -LLL -s base

  grep 'dn: '

  cut -d ' ' -f2) ds-replcheck online -D "cn=Directory Manager" -W -m ldap://$dc:389 -r ldap://$DC2.$domain:389 -b "$suffix" -i memberof,idnssoaserial,entryusn,krblastsuccessfulauth,krblastfailedauth,krbloginfailedcount

  Результат:

  Enter password:  ================================================================================          Replication Synchronization Report  (Wed Aug  6 15:50:57 2025) ================================================================================     Database RUV's =====================================================   Supplier RUV:   {replica 3 ldap://dc02.ald250.pro:389} 687a55d0000100030000 68934868000000030000   {replica 4 ldap://dc01.ald250.pro:389} 687a55c1000100040000 68934c91000000040000   {replicageneration} 687a55c1000000040000   Replica RUV:   {replica 3 ldap://dc02.ald250.pro:389} 687a55d0000100030000 68934868000000030000   {replica 4 ldap://dc01.ald250.pro:389} 687a55c1000100040000 6891d7b1000000040000   {replicageneration} 687a55c1000000040000   Replication State: Replica is behind Supplier by: 95456 seconds     Entry Counts =====================================================   Supplier:  3703 Replica: 3813     Tombstones =====================================================   Supplier:  17 Replica: 10     Conflict Entries =====================================================   Supplier Conflict Entries:  2     Missing Entries =====================================================     Entries missing on Replica:    - cn=a1_9tplmxnqe0duwgnf5rk7dku1hhc6,cn=users_history,cn=accounts,dc=ald250,dc=pro  (Created on Supplier at: Tue Aug  5 10:51:28 2025)    - cn=a2_dyj6exrhicuii991av19kqyoipsv,cn=users_history,cn=accounts,dc=ald250,dc=pro  (Created on Supplier at: Tue Aug  5 10:52:16 2025)    - cn=conflict_user_3m98nnfmo7u7d2rsx,cn=users_history,cn=accounts,dc=ald250,dc=pro  (Created on Supplier at: Tue Aug  5 10:55:18 2025)    - uid=a1,cn=deleted users,cn=accounts,cn=provisioning,dc=ald250,dc=pro  (Created on Supplier at: Tue Aug  5 12:44:10 2025)    - uid=a2,cn=deleted users,cn=accounts,cn=provisioning,dc=ald250,dc=pro  (Created on Supplier at: Tue Aug  5 12:44:11 2025)    - cn=test_role,cn=roles,cn=accounts,dc=ald250,dc=pro  (Created on Supplier at: Wed Aug  6 08:36:15 2025)    - cn=journal.ald250.pro,cn=log,cn=services,cn=aldpro,cn=etc,dc=ald250,dc=pro  (Created on Supplier at: Wed Aug  6 09:58:46 2025)    - cn=ansible,cn=users_history,cn=accounts,dc=ald250,dc=pro  (Created on Supplier at: Wed Aug  6 09:59:51 2025)    - cn=login,cn=audit,dc=ald250,dc=pro  (Created on Supplier at: Wed Aug  6 09:59:52 2025)     Entries missing on Supplier:    - cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:57 2025)    - cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:57 2025)    - uid=conflict_user,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - uid=testuser,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - uid=admin,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ng,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:57 2025)    - cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:57 2025)    - cn=conflict_user,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - cn=testuser,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - cn=print_admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=Default\20SMB\20Group,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ald\20trust\20admin,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=editors,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=computers,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:57 2025)    - ou=sudoers,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:57 2025)    - cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:56 2025)    - cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:56 2025)    - uid=conflict_user,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - uid=testuser,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - uid=admin,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ng,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:56 2025)    - cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:56 2025)    - cn=conflict_user,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - cn=testuser,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - cn=print_admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=Default\20SMB\20Group,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ald\20trust\20admin,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=editors,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=computers,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:56 2025)    - ou=sudoers,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:56 2025)    - cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:56 2025)    - cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:56 2025)    - uid=conflict_user,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - uid=testuser,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - uid=admin,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ng,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:56 2025)    - cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:56 2025)    - cn=conflict_user,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - cn=testuser,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - cn=print_admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=Default\20SMB\20Group,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ald\20trust\20admin,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=editors,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=computers,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:56 2025)    - ou=sudoers,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:56 2025)    - cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:55 2025)    - cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:55 2025)    - uid=conflict_user,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - uid=testuser,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - uid=admin,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ng,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:55 2025)    - cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:55 2025)    - cn=conflict_user,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - cn=testuser,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - cn=print_admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=Default\20SMB\20Group,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ald\20trust\20admin,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=editors,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=computers,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:55 2025)    - ou=sudoers,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:55 2025)    - cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:55 2025)    - cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:55 2025)    - uid=conflict_user,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - uid=testuser,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - uid=admin,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ng,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:55 2025)    - cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:55 2025)    - cn=conflict_user,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - cn=testuser,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - cn=print_admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=Default\20SMB\20Group,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ald\20trust\20admin,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=editors,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=computers,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:55 2025)    - ou=sudoers,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:55 2025)    - cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:54 2025)    - cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:54 2025)    - uid=conflict_user,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - uid=testuser,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - uid=admin,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ng,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:54 2025)    - cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:54 2025)    - cn=conflict_user,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - cn=testuser,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - cn=print_admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=Default\20SMB\20Group,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ald\20trust\20admin,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=editors,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=computers,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:54 2025)    - ou=sudoers,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:54 2025)    - cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:54 2025)    - cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:54 2025)    - uid=conflict_user,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - uid=testuser,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - uid=admin,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ng,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:54 2025)    - cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:54 2025)    - cn=conflict_user,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - cn=testuser,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - cn=print_admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=Default\20SMB\20Group,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ald\20trust\20admin,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=editors,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=computers,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:54 2025)    - ou=sudoers,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:54 2025)    - cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:53 2025)    - cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:53 2025)    - uid=conflict_user,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - uid=testuser,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - uid=admin,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ng,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:53 2025)    - cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:53 2025)    - cn=conflict_user,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - cn=testuser,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - cn=print_admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=Default\20SMB\20Group,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ald\20trust\20admin,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=editors,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=computers,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:53 2025)    - ou=sudoers,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:53 2025)     Entry Inconsistencies =====================================================   cn=log,cn=services,cn=aldpro,cn=etc,dc=ald250,dc=pro

  • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • 
                                                                                                         - Attribute 'aci' is different:
                                                                                                              Supplier:
                                                                                                                - Value:      (targetattr = "*")(target = "ldap
                                                                                                                - State Info: aci;vucsn-68932756000400040000: (targetattr = "*")(target = "ldap:///cn=log,cn=services,cn=aldpro,cn=etc,dc=ald250,dc=pro")(version 3.0;acl "Read service log container by host journal.ald250.pro";allow (compare,read,search) userdn = "ldap:///fqdn=journal.ald250.pro,cn=computers,cn=accounts,dc=ald250,dc=pro"
                                                                                                                - Date:       Wed Aug  6 12:58:46 2025
                                                                                                         
                                                                                                                - Value:      (targetattr = "cn || envvar")(target = "ldap
                                                                                                                - State Info: aci;vucsn-68932757000000040000: (targetattr = "cn || envvar")(target = "ldap:///cn=journal.ald250.pro,cn=log,cn=services,cn=aldpro,cn=etc,dc=ald250,dc=pro")(version 3.0;acl "Read service log envvar by host journal.ald250.pro";allow (compare,read,search) userdn = "ldap:///fqdn=journal.ald250.pro,cn=computers,cn=accounts,dc=ald250,dc=pro"
                                                                                                                - Date:       Wed Aug  6 12:58:47 2025
                                                                                                         
                                                                                                              Replica: 
                                                                                                                - Origin value: b'(targetattr = "")(targetfilter = "(objectClass=)")(version 3.0;acl "permission:ALDPRO - Add Event Log Servers";allow (add) groupdn = "ldap:///cn=ALDPRO - Add Event Log Servers,cn=permissions,cn=pbac,dc=ald250,dc=pro"'
                                                                                                                - Origin value: b'(targetattr = "")(targetfilter = "(objectClass=)")(version 3.0;acl "permission:ALDPRO - Read Event Log Servers";allow (compare,read,search) groupdn = "ldap:///cn=ALDPRO - Read Event Log Servers,cn=permissions,cn=pbac,dc=ald250,dc=pro"'
                                                                                                                - Origin value: b'(targetattr = "")(targetfilter = "(objectClass=)")(version 3.0;acl "permission:ALDPRO - Remove Event Log Servers";allow (delete) groupdn = "ldap:///cn=ALDPRO - Remove Event Log Servers,cn=permissions,cn=pbac,dc=ald250,dc=pro"'
                                                                                                                - Origin value: b'(targetattr = "rbtaServiceName || servicerole || cn || rbtasite || objectClass")(targetfilter = "(objectclass=rbta-aldpro-service-instance)")(version 3.0;acl "permission:ALDPRO ROCO Event Log Servers - Read";allow (read,search,compare) groupdn = "ldap:///cn=ALDPRO ROCO Event Log Servers - Read,cn=permissions,cn=pbac,dc=ald250,dc=pro"'
                                                                                                                - Origin value: b'(targetattr = "rbtasite || servicerole")(targetfilter = "(objectClass=*)")(version 3.0;acl "permission:ALDPRO - Modify Event Log Servers";allow (write) groupdn = "ldap:///cn=ALDPRO - Modify Event Log Servers,cn=permissions,cn=pbac,dc=ald250,dc=pro"'
                                                                                                         
                                                                                                         
                                                                                                        cn=ALDPRO ROCO Attributes Mapping - Read,cn=privileges,cn=pbac,dc=ald250,dc=pro
                                                                                                        
                                                                                                        • • • • • • • • • • • • • • • • • • • • • • • • • • • 
                                                                                                                                                               - Attribute 'member' is different:
                                                                                                                                                                    Supplier:
                                                                                                                                                                      - Value:      cn=ALDPRO - Main Administrator,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                      - State Info: member;adcsn-68931de1000200040000;vucsn-68931de1000200040000: cn=ALDPRO - Main Administrator,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                      - Date:       Wed Aug  6 12:18:25 2025
                                                                                                                                                               
                                                                                                                                                                      - Value:      cn=ALDPRO - Domain Viewer,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                      - State Info: member;vucsn-68931de1000200040000: cn=ALDPRO - Domain Viewer,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                      - Date:       Wed Aug  6 12:18:25 2025
                                                                                                                                                               
                                                                                                                                                                      - Value:      cn=ALDPRO - Syncer Attributes Mapping Administrators,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                      - State Info: member;vucsn-68931de1000200040000: cn=ALDPRO - Syncer Attributes Mapping Administrators,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                      - Date:       Wed Aug  6 12:18:25 2025
                                                                                                                                                               
                                                                                                                                                                      - Value:      cn=test_role,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                      - State Info: member;vucsn-68931de1000200040000: cn=test_role,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                      - Date:       Wed Aug  6 12:18:25 2025
                                                                                                                                                               
                                                                                                                                                                    Replica: 
                                                                                                                                                                      - Origin value: b'cn=ALDPRO - Domain Viewer,cn=roles,cn=accounts,dc=ald250,dc=pro'
                                                                                                                                                                      - Origin value: b'cn=ALDPRO - Main Administrator,cn=roles,cn=accounts,dc=ald250,dc=pro'
                                                                                                                                                                      - Origin value: b'cn=ALDPRO - Syncer Attributes Mapping Administrators,cn=roles,cn=accounts,dc=ald250,dc=pro'
                                                                                                                                                               
                                                                                                                                                               
                                                                                                                                                              cn=ALDPRO ROCO Attributes Mapping - Manage,cn=privileges,cn=pbac,dc=ald250,dc=pro
                                                                                                                                                              
                                                                                                                                                              • • 
                                                                                                                                                                   - Attribute 'member' is different:
                                                                                                                                                                        Supplier:
                                                                                                                                                                          - Value:      cn=ALDPRO - Main Administrator,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                          - State Info: member;adcsn-68931de0000100040000;vucsn-68931de0000100040000: cn=ALDPRO - Main Administrator,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                          - Date:       Wed Aug  6 12:18:24 2025
                                                                                                                                                                   
                                                                                                                                                                          - Value:      cn=ALDPRO - Syncer Attributes Mapping Administrators,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                          - State Info: member;vucsn-68931de0000100040000: cn=ALDPRO - Syncer Attributes Mapping Administrators,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                          - Date:       Wed Aug  6 12:18:24 2025
                                                                                                                                                                   
                                                                                                                                                                          - Value:      cn=test_role,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                          - State Info: member;vucsn-68931de0000100040000: cn=test_role,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                          - Date:       Wed Aug  6 12:18:24 2025
                                                                                                                                                                   
                                                                                                                                                                        Replica: 
                                                                                                                                                                          - Origin value: b'cn=ALDPRO - Main Administrator,cn=roles,cn=accounts,dc=ald250,dc=pro'
                                                                                                                                                                          - Origin value: b'cn=ALDPRO - Syncer Attributes Mapping Administrators,cn=roles,cn=accounts,dc=ald250,dc=pro'
                                                                                                                                                                   
                                                                                                                                                                   
                                                                                                                                                                  cn=ALDPRO - Organizational Units Administrators,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                  
                                                                                                                                                                  • • • • 
                                                                                                                                                                           - Replica missing attribute: "member"
                                                                                                                                                                           
                                                                                                                                                                           - Supplier's State Info: member;adcsn-68930940000000040000;vucsn-68930940000000040000: uid=testuser,cn=users,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                           - Date: Wed Aug  6 10:50:24 2025
                                                                                                                                                                           
                                                                                                                                                                           
                                                                                                                                                                          fqdn=journal.ald250.pro,cn=computers,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                          

                                                                                                                                • \\  - Replica missing attribute: <span style="color: #003366">"rbtasubsystemconfigstate"</span> \\   \\  - Supplier's State Info: rbtaSubsystemConfigState;adcsn-68932eab000000040000;vucsn-68932eab000000040000: \{<span style="color: #003366">"state"</span>: <span style="color: #003366">"applied"</span>\} \\  - Date: Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">13</span>:<span style="color: #009900">30</span>:<span style="color: #009900">03</span> <span style="color: #009900">2025</span> \\   \\  - Replica missing attribute: <span style="color: #003366">"rbtasubsystemconfig"</span> \\   \\  - Supplier's State Info: rbtaSubsystemConfig;adcsn-6893278e000400040000;vucsn-6893278e000400040000: \{<span style="color: #003366">"is_master"</span>: <span style="color: #336699"><strong>true</strong></span>\} \\  - Date: Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">59</span>:<span style="color: #009900">42</span> <span style="color: #009900">2025</span> \\   \\  - Replica missing attribute: <span style="color: #003366">"rbtasubsystemversionald"</span> \\   \\  - Supplier's State Info: rbtaSubsystemVersionAld;adcsn-6893278e000300040000;vucsn-6893278e000300040000: <span style="color: #009900">2.5</span>.<span style="color: #009900">0</span> \\  - Date: Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">59</span>:<span style="color: #009900">42</span> <span style="color: #009900">2025</span> \\   \\  - Replica missing attribute: <span style="color: #003366">"rbtasubsystemstate"</span> \\   \\  - Supplier's State Info: rbtaSubsystemState;adcsn-6893278e000200040000;vucsn-6893278e000200040000: installed \\  - Date: Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">59</span>:<span style="color: #009900">42</span> <span style="color: #009900">2025</span> \\   \\  - Replica missing attribute: <span style="color: #003366">"rbtasubsystemmetainfo"</span> \\   \\  - Supplier's State Info: rbtaSubsystemMetainfo;adcsn-6893278e000100040000;vucsn-6893278e000100040000: \{<span style="color: #003366">"state"</span>: <span style="color: #003366">"installed"</span>, <span style="color: #003366">"location"</span>: <span style="color: #003366">"hq"</span>, <span style="color: #003366">"role"</span>: <span style="color: #003366">"log"</span>, <span style="color: #003366">"site"</span>: <span style="color: #003366">"\u0413\u043e\u043b\u043e\u0432\u043d\u043e\u0439 \u043e\u0444\u0438\u0441"</span>, <span style="color: #003366">"state_created"</span>: <span style="color: #003366">"20250806095846Z"</span>, <span style="color: #003366">"state_updated"</span>: <span style="color: #003366">"20250806095942Z"</span>, <span style="color: #003366">"version_ald"</span>: <span style="color: #003366">"2.5.0"</span>\} \\  - Date: Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">59</span>:<span style="color: #009900">42</span> <span style="color: #009900">2025</span> \\   \\  - Replica missing attribute: <span style="color: #003366">"rbtasubsystemlog"</span> \\   \\  - Supplier's State Info: rbtaSubsystemLog;adcsn-6893278e000000040000;vucsn-6893278e000000040000: \[\{<span style="color: #003366">"timestamp"</span>: <span style="color: #003366">"2025-08-06T09:58:46Z"</span>, <span style="color: #003366">"code"</span>: <span style="color: #009900">1</span>, <span style="color: #003366">"desc"</span>: <span style="color: #003366">"\u041e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0430"</span>\}, \{<span style="color: #003366">"timestamp"</span>: <span style="color: #003366">"2025-08-06T09:59:33.660699Z"</span>, <span style="color: #003366">"code"</span>: <span style="color: #009900">9</span>, <span style="color: #003366">"desc"</span>: <span style="color: #003366">"\u041d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430"</span>\}, \{<span style="color: #003366">"timestamp"</span>: <span style="color: #003366">"2025-08-06T09:59:42.119576Z"</span>, <span style="color: #003366">"code"</span>: <span style="color: #009900">2</span>, <span style="color: #003366">"desc"</span>: <span style="color: #003366">"\u0421\u0435\u0440\u0432\u0435\u0440 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d"</span>\}\] \\  - Date: Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">59</span>:<span style="color: #009900">42</span> <span style="color: #009900">2025</span> \\   \\  - Replica missing attribute: <span style="color: #003366">"rbtasubsystemsite"</span> \\   \\  - Supplier's State Info: rbtaSubsystemSite;vucsn-<span style="color: #009900">68932756000000040006</span>:: 0JPQvtC70L7QstC90L7QuSDQvtGE0LjRgQ== \\  - Date: Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\  - Replica missing attribute: <span style="color: #003366">"rbtasubsystemrole"</span> \\   \\  - Supplier's State Info: rbtaSubsystemRole;vucsn-<span style="color: #009900">68932756000000040005</span>: log \\  - Date: Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\  - Replica missing attribute: <span style="color: #003366">"aldprochangesauthtor"</span> \\   \\  - Supplier's State Info: aldproChangesAuthtor;vucsn-<span style="color: #009900">68932756000000040000</span>: cn=admin_353bd1beb59483655e479012fc,cn=users_history,cn=accounts,dc=ald250,dc=pro \\  - Date: Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\  - Replica missing attribute: <span style="color: #003366">"aci"</span> \\   \\  - Supplier's State Info: aci;vucsn-<span style="color: #009900">68932756000200040000</span>: (targetattr = <span style="color: #003366">"objectclass || rbtaSubsystemCredentials || rbtaSubsystemMetainfo || rbtaSubsystemLog || rbtaSubsystemConfig || rbtaSubsystemRole || rbtaSubsystemVersionAld || rbtaSubsystemState || rbtaSubsystemConfigState || rbtaSubsystemSite || rbta-csr || rbta-crt"</span>)(target = <span style="color: #003366">"ldap:///fqdn=journal.ald250.pro,cn=computers,cn=accounts,dc=ald250,dc=pro"</span>)(version <span style="color: #009900">3.0</span>;acl <span style="color: #003366">"Read on behalf of the host"</span>;allow (compare,read,search) userdn = <span style="color: #003366">"ldap:///fqdn=journal.ald250.pro,cn=computers,cn=accounts,dc=ald250,dc=pro"</span>;) \\  - Date: Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\  - Supplier's State Info: aci;vucsn-<span style="color: #009900">68932756000300040000</span>: (targetattr = <span style="color: #003366">"rbtaSubsystemCredentials || rbtaSubsystemMetainfo || rbtaSubsystemLog || rbtaSubsystemConfig || rbtaSubsystemVersionAld || rbtaSubsystemState || rbtaSubsystemConfigState || rbta-csr || rbta-crt"</span>)(target = <span style="color: #003366">"ldap:///fqdn=journal.ald250.pro,cn=computers,cn=accounts,dc=ald250,dc=pro"</span>)(version <span style="color: #009900">3.0</span>;acl <span style="color: #003366">"Write on behalf of the host"</span>;allow (add,write,delete) userdn = <span style="color: #003366">"ldap:///fqdn=journal.ald250.pro,cn=computers,cn=accounts,dc=ald250,dc=pro"</span>;) \\  - Date: Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\  - Attribute <span style="color: #003366">'objectclass'</span> is different: \\       Supplier: \\         - Value:      ipaobject \\         - State Info: objectClass;adcsn-<span style="color: #009900">68932756000000040001</span>;vucsn-<span style="color: #009900">68932756000000040001</span>: ipaobject \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      ieee802device \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: ieee802device \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      ipaSshGroupOfPubKeys \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: ipaSshGroupOfPubKeys \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      ipahost \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: ipahost \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      ipaservice \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: ipaservice \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      ipasshhost \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: ipasshhost \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      krbprincipal \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: krbprincipal \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      krbprincipalaux \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: krbprincipalaux \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      nshost \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: nshost \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      pkiuser \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: pkiuser \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      rbta-address \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: rbta-address \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      rbta-subsystem \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: rbta-subsystem \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      rbta-subsystem-pkiproxy \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: rbta-subsystem-pkiproxy \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      rbta-unit \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: rbta-unit \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      top \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: top \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\       Replica:  \\         - Origin value: ieee802device \\         - Origin value: ipasshgroupofpubkeys \\         - Origin value: ipahost \\         - Origin value: ipaobject \\         - Origin value: ipaservice \\         - Origin value: ipasshhost \\         - Origin value: krbprincipal \\         - Origin value: krbprincipalaux \\         - Origin value: nshost \\         - Origin value: pkiuser \\         - Origin value: rbta-address \\         - Origin value: rbta-unit \\         - Origin value: top \\   \\   \\ cn=repl keep alive <span style="color: #009900">4</span>,dc=ald250,dc=pro \\

                                                                        • 
                                                                           - Attribute 'keepalivetimestamp' is different:
                                                                                Supplier:
                                                                                  - Value:      20250806123737Z
                                                                                  - State Info: keepalivetimestamp;adcsn-68934c91000000040000;vucsn-68934c91000000040000: 20250806123737Z
                                                                                  - Date:       Wed Aug  6 15:37:37 2025
                                                                           
                                                                                Replica:
                                                                                  - Value:      20250805093737Z
                                                                                  - State Info: keepalivetimestamp;adcsn-6891d0e1000000040000;vucsn-6891d0e1000000040000: 20250805093737Z
                                                                                  - Date:       Tue Aug  5 12:37:37 2025
                                                                           
                                                                           
                                                                          dnaHostname=dc01.ald250.pro+dnaPortNum=389,cn=posix-ids,cn=dna,cn=ipa,cn=etc,dc=ald250,dc=pro
                                                                          
                                                                          • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • 
                                                                                                                                                                                           - Attribute 'dnaremainingvalues' is different:
                                                                                                                                                                                                Supplier:
                                                                                                                                                                                                  - Value:      100489
                                                                                                                                                                                                  - State Info: dnaRemainingValues;adcsn-6891e339000000040000;vucsn-6891e339000000040000: 100489
                                                                                                                                                                                                  - Date:       Tue Aug  5 13:55:53 2025
                                                                                                                                                                                           
                                                                                                                                                                                                Replica:
                                                                                                                                                                                                  - Value:      199992
                                                                                                                                                                                                  - State Info: dnaRemainingValues;adcsn-6891d7ae000100040000;vucsn-6891d7ae000100040000: 199992
                                                                                                                                                                                                  - Date:       Tue Aug  5 13:06:38 2025
                                                                                                                                                                                           
                                                                                                                                                                                           
                                                                                                                                                                                          uid=testuser,cn=users,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                                          
                                                                                                  • 
                                                                                                     - Attribute 'telephonenumber' is different:
                                                                                                          Supplier:
                                                                                                            - Value:      +111111111
                                                                                                            - State Info: telephoneNumber;adcsn-6891f9fa000000040000;vucsn-6891f9fa000000040000: +111111111
                                                                                                            - Date:       Tue Aug  5 15:32:58 2025
                                                                                                     
                                                                                                          Replica:
                                                                                                            - Value:      +33333333
                                                                                                            - State Info: telephoneNumber;adcsn-6891f9de000000030000;vucsn-6891f9de000000030000: +33333333
                                                                                                            - Date:       Tue Aug  5 15:32:30 2025
                                                                                                     
                                                                                                     
                                                                                                    uid=conflict_user,cn=users,cn=accounts,dc=ald250,dc=pro
                                                                                                    
                                                                                                    • • • • • 
                                                                                                               - Attribute 'ipantsecurityidentifier' is different:
                                                                                                                    Supplier:
                                                                                                                      - Value:      S-1521196329585322683535833897352581010
                                                                                                                      - State Info: ipaNTSecurityIdentifier;adcsn-6891e316000800040001;vucsn-6891e316000800040001: S-1521196329585322683535833897352581010
                                                                                                                      - Date:       Tue Aug  5 13:55:18 2025
                                                                                                               
                                                                                                                    Replica:
                                                                                                                      - Value:      S-152119632958532268353583389735258101500
                                                                                                                      - State Info: ipaNTSecurityIdentifier;adcsn-6891e339000c00030001;vucsn-6891e339000c00030001: S-152119632958532268353583389735258101500
                                                                                                                      - Date:       Tue Aug  5 13:55:53 2025
                                                                                                               
                                                                                                               - Attribute 'krbextradata' is different:
                                                                                                                    Supplier:
                                                                                                                      - Value:      
                                                                                                                      - State Info: krbExtraData;adcsn-6891e316000300040000;vucsn-6891e316000300040000:: AAIV45Focm9vdC9hZG1pbkBBTEQyNTAuUFJPAA==
                                                                                                                      - Date:       Tue Aug  5 13:55:18 2025
                                                                                                               
                                                                                                                    Replica:
                                                                                                                      - Value:      
                                                                                                                      - State Info: krbExtraData;adcsn-6891e339000500030000;vucsn-6891e339000500030000:: AAI445Focm9vdC9hZG1pbkBBTEQyNTAuUFJPAA==
                                                                                                                      - Date:       Tue Aug  5 13:55:53 2025
                                                                                                               
                                                                                                               - Attribute 'krblastpwdchange' is different:
                                                                                                                    Supplier:
                                                                                                                      - Value:      20250805105517Z
                                                                                                                      - State Info: krbLastPwdChange;vucsn-6891e316000200040001: 20250805105517Z
                                                                                                                      - Date:       Tue Aug  5 13:55:18 2025
                                                                                                               
                                                                                                                    Replica:
                                                                                                                      - Value:      20250805105552Z
                                                                                                                      - State Info: krbLastPwdChange;vucsn-6891e339000400030001: 20250805105552Z
                                                                                                                      - Date:       Tue Aug  5 13:55:53 2025
                                                                                                               
                                                                                                               - Attribute 'krbpasswordexpiration' is different:
                                                                                                                    Supplier:
                                                                                                                      - Value:      20250805105517Z
                                                                                                                      - State Info: krbPasswordExpiration;vucsn-6891e316000200040000: 20250805105517Z
                                                                                                                      - Date:       Tue Aug  5 13:55:18 2025
                                                                                                               
                                                                                                                    Replica:
                                                                                                                      - Value:      20250805105552Z
                                                                                                                      - State Info: krbPasswordExpiration;vucsn-6891e339000400030000: 20250805105552Z
                                                                                                                      - Date:       Tue Aug  5 13:55:53 2025
                                                                                                               
                                                                                                               - Attribute 'givenname' is different:
                                                                                                                    Supplier:
                                                                                                                      - Value:      conflict
                                                                                                                      - State Info: givenName;vucsn-6891e316000000040000: conflict
                                                                                                                      - Date:       Tue Aug  5 13:55:18 2025
                                                                                                               
                                                                                                                    Replica:
                                                                                                                      - Value:      conflicted
                                                                                                                      - State Info: givenName;vucsn-6891e339000100030000: conflicted
                                                                                                                      - Date:       Tue Aug  5 13:55:53 2025
                                                                                                               
                                                                                                               - Attribute 'cn' is different:
                                                                                                                    Supplier:
                                                                                                                      - Value:      conflict User
                                                                                                                      - State Info: cn;vucsn-6891e316000000040000: conflict User
                                                                                                                      - Date:       Tue Aug  5 13:55:18 2025
                                                                                                               
                                                                                                                    Replica:
                                                                                                                      - Value:      conflicted User
                                                                                                                      - State Info: cn;vucsn-6891e339000100030000: conflicted User
                                                                                                                      - Date:       Tue Aug  5 13:55:53 2025
                                                                                                               
                                                                                                               - Attribute 'displayname' is different:
                                                                                                                    Supplier:
                                                                                                                      - Value:      conflict User
                                                                                                                      - State Info: displayName;vucsn-6891e316000000040000: conflict User
                                                                                                                      - Date:       Tue Aug  5 13:55:18 2025
                                                                                                               
                                                                                                                    Replica:
                                                                                                                      - Value:      conflicted User
                                                                                                                      - State Info: displayName;vucsn-6891e339000100030000: conflicted User
                                                                                                                      - Date:       Tue Aug  5 13:55:53 2025
                                                                                                               
                                                                                                               - Attribute 'gecos' is different:
                                                                                                                    Supplier:
                                                                                                                      - Value:      conflict User
                                                                                                                      - State Info: gecos;vucsn-6891e316000000040000: conflict User
                                                                                                                      - Date:       Tue Aug  5 13:55:18 2025
                                                                                                               
                                                                                                                    Replica:
                                                                                                                      - Value:      conflicted User
                                                                                                                      - State Info: gecos;vucsn-6891e339000100030000: conflicted User
                                                                                                                      - Date:       Tue Aug  5 13:55:53 2025
                                                                                                               
                                                                                                               - Attribute 'userpassword' is different:
                                                                                                                    Supplier:
                                                                                                                      - Value:      {PBKDF2-SHA512}10000$+mn7IoPU4om7kLc9I3PS1opkiHJteGzy$uEHe5EuvMJ4c4KOukivH8+46Ohqvx8PuvSamj18k3uQnzgZ1KBl7brBq4yEGzxJc5Y6Ssl0hkxDZ2D0cMPCOLA==
                                                                                                                      - State Info: userPassword;vucsn-6891e316000000040000: {PBKDF2-SHA512}10000$+mn7IoPU4om7kLc9I3PS1opkiHJteGzy$uEHe5EuvMJ4c4KOukivH8+46Ohqvx8PuvSamj18k3uQnzgZ1KBl7brBq4yEGzxJc5Y6Ssl0hkxDZ2D0cMPCOLA==
                                                                                                                      - Date:       Tue Aug  5 13:55:18 2025
                                                                                                               
                                                                                                                    Replica:
                                                                                                                      - Value:      {PBKDF2-SHA512}10000$uPEJ8l/mnTsjJkckyxqqJRIQx/X2OrOI$Wzm9wddHKCb9JOLl4UVQLUk/czorLTUqEOYE6QBT/l4t+B+pXgJ8xXrVmkdnKYyREYmXrpf2XyNPsOoEbzbz8A==
                                                                                                                      - State Info: userPassword;vucsn-6891e339000100030000: {PBKDF2-SHA512}10000$uPEJ8l/mnTsjJkckyxqqJRIQx/X2OrOI$Wzm9wddHKCb9JOLl4UVQLUk/czorLTUqEOYE6QBT/l4t+B+pXgJ8xXrVmkdnKYyREYmXrpf2XyNPsOoEbzbz8A==
                                                                                                                      - Date:       Tue Aug  5 13:55:53 2025
                                                                                                               
                                                                                                               - Attribute 'ipauniqueid' is different:
                                                                                                                    Supplier:
                                                                                                                      - Value:      acbf75f2-71ea-11f0-8dec-02000a452902
                                                                                                                      - State Info: ipaUniqueID;vucsn-6891e316000000040000: acbf75f2-71ea-11f0-8dec-02000a452902
                                                                                                                      - Date:       Tue Aug  5 13:55:18 2025
                                                                                                               
                                                                                                                    Replica:
                                                                                                                      - Value:      c173c7be-71ea-11f0-a685-02000a452904
                                                                                                                      - State Info: ipaUniqueID;vucsn-6891e339000100030000: c173c7be-71ea-11f0-a685-02000a452904
                                                                                                                      - Date:       Tue Aug  5 13:55:53 2025
                                                                                                               
                                                                                                               - Attribute 'krbprincipalkey' is different:
                                                                                                                    Supplier: 
                                                                                                                      - Origin value: b'0\x81\xde\xa0\x03\x02\x01\x01\xa1\x03\x02\x01\x01\xa2\x03\x02\x01\x01\xa3\x03\x02\x01\x01\xa4\x81\xc70\x81\xc40h\xa0\x1b0\x19\xa0\x03\x02\x01\x04\xa1\x12\x04\x10eYQb_EFC-)X>eHD7\xa1I0G\xa0\x03\x02\x01\x12\xa1@\x04> \x00\xcd\xb1\xeaE5Atv\xf9\xc2`\xeb\x97\xbe\xd3;\xc5T\x01\x14b\xd2\xb1\xe6\'\xff|^\x85lL\x10/`\xb3Q\x8c\x95O\x87\xd1\xb4ox!.\xed\x0f8\xd7Wf")\xbba+\x1e/10X\xa0\x1b0\x19\xa0\x03\x02\x01\x04\xa1\x12\x04\x10MF{=:)VKQ|fEio>-\xa1907\xa0\x03\x02\x01\x11\xa10\x04.\x10\x00\xcd\xdd\x0f\x88e\x9c:\xdf\xab\xf5\xee+]"z\x838\xc8\x03\xc40\x0f\x8c3\xe4}\tn\x0et\x8b\x13\x86OR\xc7~\x95:\xd2\x0e"\x14\xa1'
                                                                                                               
                                                                                                                    Replica: 
                                                                                                                      - Origin value: b'0\x81\xde\xa0\x03\x02\x01\x01\xa1\x03\x02\x01\x01\xa2\x03\x02\x01\x01\xa3\x03\x02\x01\x01\xa4\x81\xc70\x81\xc40h\xa0\x1b0\x19\xa0\x03\x02\x01\x04\xa1\x12\x04\x10cB:8<=Y-PH|B4*+k\xa1I0G\xa0\x03\x02\x01\x12\xa1@\x04> \x00_\x1b\x16\x9f\xb4\x8c\xeb\x8b\x8c5uA\xcdK\x02\xa4\xddId\xe3\x9b!\xcf\xe1\xfa\xdb~\xfe\xf9F\xa9j\xdf\x14\xc7\x05\xd9\xe9\xf8\xbe\x03\xc9&\x8f\xea\xb4\xact\xfb\xcf:j\xb8W>GO\x02\xfe\x1b0X\xa0\x1b0\x19\xa0\x03\x02\x01\x04\xa1\x12\x04\x1050QY-;1sSPVip&U$\xa1907\xa0\x03\x02\x01\x11\xa10\x04.\x10\x00Y\xcd\xc4\xb7`2W&\xea\xbal0\x8a\xa0\x87\xa0\x8d\xd8\x85\x9b\xfd\xc4\xe4\xe8\x98\xff\xb0\xa4\x18\x19\x99\x14\xf0\xa9d${\x9e\x95Es\xd1\xb4\xa4'
                                                                                                               
                                                                                                               - Attribute 'uidnumber' is different:
                                                                                                                    Supplier: 
                                                                                                                      - Origin value: b'1213200010'
                                                                                                               
                                                                                                                    Replica: 
                                                                                                                      - Origin value: b'1213300500'
                                                                                                               
                                                                                                               - Attribute 'gidnumber' is different:
                                                                                                                    Supplier: 
                                                                                                                      - Origin value: b'1213200010'
                                                                                                               
                                                                                                                    Replica: 
                                                                                                                      - Origin value: b'1213300500'
                                                                                                               
                                                                                                               
                                                                                                              cn=conflict_user,cn=groups,cn=accounts,dc=ald250,dc=pro
                                                                                                              
                                                                                                            • 
                                                                                                               - Attribute 'gidnumber' is different:
                                                                                                                    Supplier:
                                                                                                                      - Value:      1213200010
                                                                                                                      - State Info: gidNumber;vucsn-6891e316000400040000: 1213200010
                                                                                                                      - Date:       Tue Aug  5 13:55:18 2025
                                                                                                               
                                                                                                                    Replica:
                                                                                                                      - Value:      1213300500
                                                                                                                      - State Info: gidNumber;vucsn-6891e339000600030000: 1213300500
                                                                                                                      - Date:       Tue Aug  5 13:55:53 2025
                                                                                                               
                                                                                                               - Attribute 'ipauniqueid' is different:
                                                                                                                    Supplier:
                                                                                                                      - Value:      accda578-71ea-11f0-8dec-02000a452902
                                                                                                                      - State Info: ipaUniqueID;vucsn-6891e316000400040000: accda578-71ea-11f0-8dec-02000a452902
                                                                                                                      - Date:       Tue Aug  5 13:55:18 2025
                                                                                                               
                                                                                                                    Replica:
                                                                                                                      - Value:      c1a7f6d8-71ea-11f0-a685-02000a452904
                                                                                                                      - State Info: ipaUniqueID;vucsn-6891e339000600030000: c1a7f6d8-71ea-11f0-a685-02000a452904
                                                                                                                      - Date:       Tue Aug  5 13:55:53 2025
                                                                                                               
                                                                                                               
                                                                                                               
                                                                                                              Result
                                                                                                              =====================================================
                                                                                                               
                                                                                                              There are replication differences between Supplier and Replica|
                                                                                                              Результат моделирования и выполнения команды ds-replcheck:

                                                                                                              ================================================================================          Replication Synchronization Report  (Wed Aug  6 15:50:57 2025) ================================================================================     Database RUV's =====================================================   Supplier RUV:   {replica 3 ldap://dc02.ald250.pro:389} 687a55d0000100030000 68934868000000030000   {replica 4 ldap://dc01.ald250.pro:389} 687a55c1000100040000 68934c91000000040000   {replicageneration} 687a55c1000000040000   Replica RUV:   {replica 3 ldap://dc02.ald250.pro:389} 687a55d0000100030000 68934868000000030000   {replica 4 ldap://dc01.ald250.pro:389} 687a55c1000100040000 6891d7b1000000040000   {replicageneration} 687a55c1000000040000   Replication State: Replica is behind Supplier by: 95456 seconds     Entry Counts =====================================================   Supplier:  3703 Replica: 3813     Tombstones =====================================================   Supplier:  17 Replica: 10     Conflict Entries =====================================================   Supplier Conflict Entries:  2     Missing Entries =====================================================     Entries missing on Replica:    - cn=a1_9tplmxnqe0duwgnf5rk7dku1hhc6,cn=users_history,cn=accounts,dc=ald250,dc=pro  (Created on Supplier at: Tue Aug  5 10:51:28 2025)    - cn=a2_dyj6exrhicuii991av19kqyoipsv,cn=users_history,cn=accounts,dc=ald250,dc=pro  (Created on Supplier at: Tue Aug  5 10:52:16 2025)    - cn=conflict_user_3m98nnfmo7u7d2rsx,cn=users_history,cn=accounts,dc=ald250,dc=pro  (Created on Supplier at: Tue Aug  5 10:55:18 2025)    - uid=a1,cn=deleted users,cn=accounts,cn=provisioning,dc=ald250,dc=pro  (Created on Supplier at: Tue Aug  5 12:44:10 2025)    - uid=a2,cn=deleted users,cn=accounts,cn=provisioning,dc=ald250,dc=pro  (Created on Supplier at: Tue Aug  5 12:44:11 2025)    - cn=test_role,cn=roles,cn=accounts,dc=ald250,dc=pro  (Created on Supplier at: Wed Aug  6 08:36:15 2025)    - cn=journal.ald250.pro,cn=log,cn=services,cn=aldpro,cn=etc,dc=ald250,dc=pro  (Created on Supplier at: Wed Aug  6 09:58:46 2025)    - cn=ansible,cn=users_history,cn=accounts,dc=ald250,dc=pro  (Created on Supplier at: Wed Aug  6 09:59:51 2025)    - cn=login,cn=audit,dc=ald250,dc=pro  (Created on Supplier at: Wed Aug  6 09:59:52 2025)     Entries missing on Supplier:    - cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:57 2025)    - cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:57 2025)    - uid=conflict_user,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - uid=testuser,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - uid=admin,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ng,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:57 2025)    - cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:57 2025)    - cn=conflict_user,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - cn=testuser,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - cn=print_admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=Default\20SMB\20Group,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ald\20trust\20admin,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=editors,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=computers,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:57 2025)    - ou=sudoers,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:57 2025)    - cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:56 2025)    - cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:56 2025)    - uid=conflict_user,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - uid=testuser,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - uid=admin,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ng,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:56 2025)    - cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:56 2025)    - cn=conflict_user,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - cn=testuser,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - cn=print_admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=Default\20SMB\20Group,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ald\20trust\20admin,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=editors,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=computers,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:56 2025)    - ou=sudoers,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:56 2025)    - cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:56 2025)    - cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:56 2025)    - uid=conflict_user,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - uid=testuser,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - uid=admin,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ng,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:56 2025)    - cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:56 2025)    - cn=conflict_user,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - cn=testuser,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - cn=print_admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=Default\20SMB\20Group,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ald\20trust\20admin,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=editors,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=computers,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:56 2025)    - ou=sudoers,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:56 2025)    - cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:55 2025)    - cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:55 2025)    - uid=conflict_user,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - uid=testuser,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - uid=admin,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ng,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:55 2025)    - cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:55 2025)    - cn=conflict_user,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - cn=testuser,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - cn=print_admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=Default\20SMB\20Group,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ald\20trust\20admin,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=editors,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=computers,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:55 2025)    - ou=sudoers,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:55 2025)    - cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:55 2025)    - cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:55 2025)    - uid=conflict_user,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - uid=testuser,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - uid=admin,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ng,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:55 2025)    - cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:55 2025)    - cn=conflict_user,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - cn=testuser,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - cn=print_admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=Default\20SMB\20Group,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ald\20trust\20admin,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=editors,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=computers,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:55 2025)    - ou=sudoers,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:55 2025)    - cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:54 2025)    - cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:54 2025)    - uid=conflict_user,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - uid=testuser,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - uid=admin,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ng,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:54 2025)    - cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:54 2025)    - cn=conflict_user,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - cn=testuser,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - cn=print_admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=Default\20SMB\20Group,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ald\20trust\20admin,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=editors,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=computers,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:54 2025)    - ou=sudoers,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:54 2025)    - cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:54 2025)    - cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:54 2025)    - uid=conflict_user,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - uid=testuser,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - uid=admin,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ng,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:54 2025)    - cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:54 2025)    - cn=conflict_user,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - cn=testuser,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - cn=print_admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=Default\20SMB\20Group,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ald\20trust\20admin,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=editors,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=computers,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:54 2025)    - ou=sudoers,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:54 2025)    - cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:53 2025)    - cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:53 2025)    - uid=conflict_user,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - uid=testuser,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - uid=admin,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ng,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:53 2025)    - cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:53 2025)    - cn=conflict_user,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - cn=testuser,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - cn=print_admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=Default\20SMB\20Group,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ald\20trust\20admin,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=editors,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=computers,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:53 2025)

• ou=sudoers,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)
  
   
  Entry Inconsistencies
  =====================================================
   
  cn=log,cn=services,cn=aldpro,cn=etc,dc=ald250,dc=pro
  
  • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • 
                                                                                                         - Attribute 'aci' is different:
                                                                                                              Supplier:
                                                                                                                - Value:      (targetattr = "*")(target = "ldap
                                                                                                                - State Info: aci;vucsn-68932756000400040000: (targetattr = "*")(target = "ldap:///cn=log,cn=services,cn=aldpro,cn=etc,dc=ald250,dc=pro")(version 3.0;acl "Read service log container by host journal.ald250.pro";allow (compare,read,search) userdn = "ldap:///fqdn=journal.ald250.pro,cn=computers,cn=accounts,dc=ald250,dc=pro"
                                                                                                                - Date:       Wed Aug  6 12:58:46 2025
                                                                                                         
                                                                                                                - Value:      (targetattr = "cn || envvar")(target = "ldap
                                                                                                                - State Info: aci;vucsn-68932757000000040000: (targetattr = "cn || envvar")(target = "ldap:///cn=journal.ald250.pro,cn=log,cn=services,cn=aldpro,cn=etc,dc=ald250,dc=pro")(version 3.0;acl "Read service log envvar by host journal.ald250.pro";allow (compare,read,search) userdn = "ldap:///fqdn=journal.ald250.pro,cn=computers,cn=accounts,dc=ald250,dc=pro"
                                                                                                                - Date:       Wed Aug  6 12:58:47 2025
                                                                                                         
                                                                                                              Replica: 
                                                                                                                - Origin value: b'(targetattr = "")(targetfilter = "(objectClass=)")(version 3.0;acl "permission:ALDPRO - Add Event Log Servers";allow (add) groupdn = "ldap:///cn=ALDPRO - Add Event Log Servers,cn=permissions,cn=pbac,dc=ald250,dc=pro"'
                                                                                                                - Origin value: b'(targetattr = "")(targetfilter = "(objectClass=)")(version 3.0;acl "permission:ALDPRO - Read Event Log Servers";allow (compare,read,search) groupdn = "ldap:///cn=ALDPRO - Read Event Log Servers,cn=permissions,cn=pbac,dc=ald250,dc=pro"'
                                                                                                                - Origin value: b'(targetattr = "")(targetfilter = "(objectClass=)")(version 3.0;acl "permission:ALDPRO - Remove Event Log Servers";allow (delete) groupdn = "ldap:///cn=ALDPRO - Remove Event Log Servers,cn=permissions,cn=pbac,dc=ald250,dc=pro"'
                                                                                                                - Origin value: b'(targetattr = "rbtaServiceName || servicerole || cn || rbtasite || objectClass")(targetfilter = "(objectclass=rbta-aldpro-service-instance)")(version 3.0;acl "permission:ALDPRO ROCO Event Log Servers - Read";allow (read,search,compare) groupdn = "ldap:///cn=ALDPRO ROCO Event Log Servers - Read,cn=permissions,cn=pbac,dc=ald250,dc=pro"'
                                                                                                                - Origin value: b'(targetattr = "rbtasite || servicerole")(targetfilter = "(objectClass=*)")(version 3.0;acl "permission:ALDPRO - Modify Event Log Servers";allow (write) groupdn = "ldap:///cn=ALDPRO - Modify Event Log Servers,cn=permissions,cn=pbac,dc=ald250,dc=pro"'
                                                                                                         
                                                                                                         
                                                                                                        cn=ALDPRO ROCO Attributes Mapping - Read,cn=privileges,cn=pbac,dc=ald250,dc=pro
                                                                                                        
                                                                                                        • • • • • • • • • • • • • • • • • • • • • • • • • • • 
                                                                                                                                                               - Attribute 'member' is different:
                                                                                                                                                                    Supplier:
                                                                                                                                                                      - Value:      cn=ALDPRO - Main Administrator,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                      - State Info: member;adcsn-68931de1000200040000;vucsn-68931de1000200040000: cn=ALDPRO - Main Administrator,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                      - Date:       Wed Aug  6 12:18:25 2025
                                                                                                                                                               
                                                                                                                                                                      - Value:      cn=ALDPRO - Domain Viewer,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                      - State Info: member;vucsn-68931de1000200040000: cn=ALDPRO - Domain Viewer,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                      - Date:       Wed Aug  6 12:18:25 2025
                                                                                                                                                               
                                                                                                                                                                      - Value:      cn=ALDPRO - Syncer Attributes Mapping Administrators,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                      - State Info: member;vucsn-68931de1000200040000: cn=ALDPRO - Syncer Attributes Mapping Administrators,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                      - Date:       Wed Aug  6 12:18:25 2025
                                                                                                                                                               
                                                                                                                                                                      - Value:      cn=test_role,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                      - State Info: member;vucsn-68931de1000200040000: cn=test_role,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                      - Date:       Wed Aug  6 12:18:25 2025
                                                                                                                                                               
                                                                                                                                                                    Replica: 
                                                                                                                                                                      - Origin value: b'cn=ALDPRO - Domain Viewer,cn=roles,cn=accounts,dc=ald250,dc=pro'
                                                                                                                                                                      - Origin value: b'cn=ALDPRO - Main Administrator,cn=roles,cn=accounts,dc=ald250,dc=pro'
                                                                                                                                                                      - Origin value: b'cn=ALDPRO - Syncer Attributes Mapping Administrators,cn=roles,cn=accounts,dc=ald250,dc=pro'
                                                                                                                                                               
                                                                                                                                                               
                                                                                                                                                              cn=ALDPRO ROCO Attributes Mapping - Manage,cn=privileges,cn=pbac,dc=ald250,dc=pro
                                                                                                                                                              
                                                                                                                                                              • • 
                                                                                                                                                                   - Attribute 'member' is different:
                                                                                                                                                                        Supplier:
                                                                                                                                                                          - Value:      cn=ALDPRO - Main Administrator,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                          - State Info: member;adcsn-68931de0000100040000;vucsn-68931de0000100040000: cn=ALDPRO - Main Administrator,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                          - Date:       Wed Aug  6 12:18:24 2025
                                                                                                                                                                   
                                                                                                                                                                          - Value:      cn=ALDPRO - Syncer Attributes Mapping Administrators,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                          - State Info: member;vucsn-68931de0000100040000: cn=ALDPRO - Syncer Attributes Mapping Administrators,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                          - Date:       Wed Aug  6 12:18:24 2025
                                                                                                                                                                   
                                                                                                                                                                          - Value:      cn=test_role,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                          - State Info: member;vucsn-68931de0000100040000: cn=test_role,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                          - Date:       Wed Aug  6 12:18:24 2025
                                                                                                                                                                   
                                                                                                                                                                        Replica: 
                                                                                                                                                                          - Origin value: b'cn=ALDPRO - Main Administrator,cn=roles,cn=accounts,dc=ald250,dc=pro'
                                                                                                                                                                          - Origin value: b'cn=ALDPRO - Syncer Attributes Mapping Administrators,cn=roles,cn=accounts,dc=ald250,dc=pro'
                                                                                                                                                                   
                                                                                                                                                                   
                                                                                                                                                                  cn=ALDPRO - Organizational Units Administrators,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                  
                                                                                                                                                                  • • • • 
                                                                                                                                                                           - Replica missing attribute: "member"
                                                                                                                                                                           
                                                                                                                                                                           - Supplier's State Info: member;adcsn-68930940000000040000;vucsn-68930940000000040000: uid=testuser,cn=users,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                           - Date: Wed Aug  6 10:50:24 2025
                                                                                                                                                                           
                                                                                                                                                                           
                                                                                                                                                                          fqdn=journal.ald250.pro,cn=computers,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                          

                                                                                                                                • \\  - Replica missing attribute: <span style="color: #003366">"rbtasubsystemconfigstate"</span> \\   \\  - Supplier's State Info: rbtaSubsystemConfigState;adcsn-68932eab000000040000;vucsn-68932eab000000040000: \{<span style="color: #003366">"state"</span>: <span style="color: #003366">"applied"</span>\} \\  - Date: Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">13</span>:<span style="color: #009900">30</span>:<span style="color: #009900">03</span> <span style="color: #009900">2025</span> \\   \\  - Replica missing attribute: <span style="color: #003366">"rbtasubsystemconfig"</span> \\   \\  - Supplier's State Info: rbtaSubsystemConfig;adcsn-6893278e000400040000;vucsn-6893278e000400040000: \{<span style="color: #003366">"is_master"</span>: <span style="color: #336699"><strong>true</strong></span>\} \\  - Date: Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">59</span>:<span style="color: #009900">42</span> <span style="color: #009900">2025</span> \\   \\  - Replica missing attribute: <span style="color: #003366">"rbtasubsystemversionald"</span> \\   \\  - Supplier's State Info: rbtaSubsystemVersionAld;adcsn-6893278e000300040000;vucsn-6893278e000300040000: <span style="color: #009900">2.5</span>.<span style="color: #009900">0</span> \\  - Date: Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">59</span>:<span style="color: #009900">42</span> <span style="color: #009900">2025</span> \\   \\  - Replica missing attribute: <span style="color: #003366">"rbtasubsystemstate"</span> \\   \\  - Supplier's State Info: rbtaSubsystemState;adcsn-6893278e000200040000;vucsn-6893278e000200040000: installed \\  - Date: Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">59</span>:<span style="color: #009900">42</span> <span style="color: #009900">2025</span> \\   \\  - Replica missing attribute: <span style="color: #003366">"rbtasubsystemmetainfo"</span> \\   \\  - Supplier's State Info: rbtaSubsystemMetainfo;adcsn-6893278e000100040000;vucsn-6893278e000100040000: \{<span style="color: #003366">"state"</span>: <span style="color: #003366">"installed"</span>, <span style="color: #003366">"location"</span>: <span style="color: #003366">"hq"</span>, <span style="color: #003366">"role"</span>: <span style="color: #003366">"log"</span>, <span style="color: #003366">"site"</span>: <span style="color: #003366">"\u0413\u043e\u043b\u043e\u0432\u043d\u043e\u0439 \u043e\u0444\u0438\u0441"</span>, <span style="color: #003366">"state_created"</span>: <span style="color: #003366">"20250806095846Z"</span>, <span style="color: #003366">"state_updated"</span>: <span style="color: #003366">"20250806095942Z"</span>, <span style="color: #003366">"version_ald"</span>: <span style="color: #003366">"2.5.0"</span>\} \\  - Date: Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">59</span>:<span style="color: #009900">42</span> <span style="color: #009900">2025</span> \\   \\  - Replica missing attribute: <span style="color: #003366">"rbtasubsystemlog"</span> \\   \\  - Supplier's State Info: rbtaSubsystemLog;adcsn-6893278e000000040000;vucsn-6893278e000000040000: \[\{<span style="color: #003366">"timestamp"</span>: <span style="color: #003366">"2025-08-06T09:58:46Z"</span>, <span style="color: #003366">"code"</span>: <span style="color: #009900">1</span>, <span style="color: #003366">"desc"</span>: <span style="color: #003366">"\u041e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0430"</span>\}, \{<span style="color: #003366">"timestamp"</span>: <span style="color: #003366">"2025-08-06T09:59:33.660699Z"</span>, <span style="color: #003366">"code"</span>: <span style="color: #009900">9</span>, <span style="color: #003366">"desc"</span>: <span style="color: #003366">"\u041d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430"</span>\}, \{<span style="color: #003366">"timestamp"</span>: <span style="color: #003366">"2025-08-06T09:59:42.119576Z"</span>, <span style="color: #003366">"code"</span>: <span style="color: #009900">2</span>, <span style="color: #003366">"desc"</span>: <span style="color: #003366">"\u0421\u0435\u0440\u0432\u0435\u0440 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d"</span>\}\] \\  - Date: Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">59</span>:<span style="color: #009900">42</span> <span style="color: #009900">2025</span> \\   \\  - Replica missing attribute: <span style="color: #003366">"rbtasubsystemsite"</span> \\   \\  - Supplier's State Info: rbtaSubsystemSite;vucsn-<span style="color: #009900">68932756000000040006</span>:: 0JPQvtC70L7QstC90L7QuSDQvtGE0LjRgQ== \\  - Date: Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\  - Replica missing attribute: <span style="color: #003366">"rbtasubsystemrole"</span> \\   \\  - Supplier's State Info: rbtaSubsystemRole;vucsn-<span style="color: #009900">68932756000000040005</span>: log \\  - Date: Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\  - Replica missing attribute: <span style="color: #003366">"aldprochangesauthtor"</span> \\   \\  - Supplier's State Info: aldproChangesAuthtor;vucsn-<span style="color: #009900">68932756000000040000</span>: cn=admin_353bd1beb59483655e479012fc,cn=users_history,cn=accounts,dc=ald250,dc=pro \\  - Date: Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\  - Replica missing attribute: <span style="color: #003366">"aci"</span> \\   \\  - Supplier's State Info: aci;vucsn-<span style="color: #009900">68932756000200040000</span>: (targetattr = <span style="color: #003366">"objectclass || rbtaSubsystemCredentials || rbtaSubsystemMetainfo || rbtaSubsystemLog || rbtaSubsystemConfig || rbtaSubsystemRole || rbtaSubsystemVersionAld || rbtaSubsystemState || rbtaSubsystemConfigState || rbtaSubsystemSite || rbta-csr || rbta-crt"</span>)(target = <span style="color: #003366">"ldap:///fqdn=journal.ald250.pro,cn=computers,cn=accounts,dc=ald250,dc=pro"</span>)(version <span style="color: #009900">3.0</span>;acl <span style="color: #003366">"Read on behalf of the host"</span>;allow (compare,read,search) userdn = <span style="color: #003366">"ldap:///fqdn=journal.ald250.pro,cn=computers,cn=accounts,dc=ald250,dc=pro"</span>;) \\  - Date: Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\  - Supplier's State Info: aci;vucsn-<span style="color: #009900">68932756000300040000</span>: (targetattr = <span style="color: #003366">"rbtaSubsystemCredentials || rbtaSubsystemMetainfo || rbtaSubsystemLog || rbtaSubsystemConfig || rbtaSubsystemVersionAld || rbtaSubsystemState || rbtaSubsystemConfigState || rbta-csr || rbta-crt"</span>)(target = <span style="color: #003366">"ldap:///fqdn=journal.ald250.pro,cn=computers,cn=accounts,dc=ald250,dc=pro"</span>)(version <span style="color: #009900">3.0</span>;acl <span style="color: #003366">"Write on behalf of the host"</span>;allow (add,write,delete) userdn = <span style="color: #003366">"ldap:///fqdn=journal.ald250.pro,cn=computers,cn=accounts,dc=ald250,dc=pro"</span>;) \\  - Date: Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\  - Attribute <span style="color: #003366">'objectclass'</span> is different: \\       Supplier: \\         - Value:      ipaobject \\         - State Info: objectClass;adcsn-<span style="color: #009900">68932756000000040001</span>;vucsn-<span style="color: #009900">68932756000000040001</span>: ipaobject \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      ieee802device \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: ieee802device \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      ipaSshGroupOfPubKeys \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: ipaSshGroupOfPubKeys \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      ipahost \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: ipahost \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      ipaservice \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: ipaservice \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      ipasshhost \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: ipasshhost \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      krbprincipal \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: krbprincipal \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      krbprincipalaux \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: krbprincipalaux \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      nshost \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: nshost \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      pkiuser \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: pkiuser \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      rbta-address \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: rbta-address \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      rbta-subsystem \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: rbta-subsystem \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      rbta-subsystem-pkiproxy \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: rbta-subsystem-pkiproxy \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      rbta-unit \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: rbta-unit \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      top \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: top \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\       Replica:  \\         - Origin value: ieee802device \\         - Origin value: ipasshgroupofpubkeys \\         - Origin value: ipahost \\         - Origin value: ipaobject \\         - Origin value: ipaservice \\         - Origin value: ipasshhost \\         - Origin value: krbprincipal \\         - Origin value: krbprincipalaux \\         - Origin value: nshost \\         - Origin value: pkiuser \\         - Origin value: rbta-address \\         - Origin value: rbta-unit \\         - Origin value: top \\   \\   \\ cn=repl keep alive <span style="color: #009900">4</span>,dc=ald250,dc=pro \\

                                                                        • 
                                                                           - Attribute 'keepalivetimestamp' is different:
                                                                                Supplier:
                                                                                  - Value:      20250806123737Z
                                                                                  - State Info: keepalivetimestamp;adcsn-68934c91000000040000;vucsn-68934c91000000040000: 20250806123737Z
                                                                                  - Date:       Wed Aug  6 15:37:37 2025
                                                                           
                                                                                Replica:
                                                                                  - Value:      20250805093737Z
                                                                                  - State Info: keepalivetimestamp;adcsn-6891d0e1000000040000;vucsn-6891d0e1000000040000: 20250805093737Z
                                                                                  - Date:       Tue Aug  5 12:37:37 2025
                                                                           
                                                                           
                                                                          dnaHostname=dc01.ald250.pro+dnaPortNum=389,cn=posix-ids,cn=dna,cn=ipa,cn=etc,dc=ald250,dc=pro
                                                                          
                                                                          • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • 
                                                                                                                                                                                           - Attribute 'dnaremainingvalues' is different:
                                                                                                                                                                                                Supplier:
                                                                                                                                                                                                  - Value:      100489
                                                                                                                                                                                                  - State Info: dnaRemainingValues;adcsn-6891e339000000040000;vucsn-6891e339000000040000: 100489
                                                                                                                                                                                                  - Date:       Tue Aug  5 13:55:53 2025
                                                                                                                                                                                           
                                                                                                                                                                                                Replica:
                                                                                                                                                                                                  - Value:      199992
                                                                                                                                                                                                  - State Info: dnaRemainingValues;adcsn-6891d7ae000100040000;vucsn-6891d7ae000100040000: 199992
                                                                                                                                                                                                  - Date:       Tue Aug  5 13:06:38 2025
                                                                                                                                                                                           
                                                                                                                                                                                           
                                                                                                                                                                                          uid=testuser,cn=users,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                                          
                                                                                                  • 
                                                                                                     - Attribute 'telephonenumber' is different:
                                                                                                          Supplier:
                                                                                                            - Value:      +111111111
                                                                                                            - State Info: telephoneNumber;adcsn-6891f9fa000000040000;vucsn-6891f9fa000000040000: +111111111
                                                                                                            - Date:       Tue Aug  5 15:32:58 2025
                                                                                                     
                                                                                                          Replica:
                                                                                                            - Value:      +33333333
                                                                                                            - State Info: telephoneNumber;adcsn-6891f9de000000030000;vucsn-6891f9de000000030000: +33333333
                                                                                                            - Date:       Tue Aug  5 15:32:30 2025
                                                                                                     
                                                                                                     
                                                                                                    uid=conflict_user,cn=users,cn=accounts,dc=ald250,dc=pro
                                                                                                    
                                                                                                    • • • • • 
                                                                                                               - Attribute 'ipantsecurityidentifier' is different:
                                                                                                                    Supplier:
                                                                                                                      - Value:      S-1521196329585322683535833897352581010
                                                                                                                      - State Info: ipaNTSecurityIdentifier;adcsn-6891e316000800040001;vucsn-6891e316000800040001: S-1521196329585322683535833897352581010
                                                                                                                      - Date:       Tue Aug  5 13:55:18 2025
                                                                                                               
                                                                                                                    Replica:
                                                                                                                      - Value:      S-152119632958532268353583389735258101500
                                                                                                                      - State Info: ipaNTSecurityIdentifier;adcsn-6891e339000c00030001;vucsn-6891e339000c00030001: S-152119632958532268353583389735258101500
                                                                                                                      - Date:       Tue Aug  5 13:55:53 2025
                                                                                                               
                                                                                                               - Attribute 'krbextradata' is different:
                                                                                                                    Supplier:
                                                                                                                      - Value:      
                                                                                                                      - State Info: krbExtraData;adcsn-6891e316000300040000;vucsn-6891e316000300040000:: AAIV45Focm9vdC9hZG1pbkBBTEQyNTAuUFJPAA==
                                                                                                                      - Date:       Tue Aug  5 13:55:18 2025
                                                                                                               
                                                                                                                    Replica:
                                                                                                                      - Value:      
                                                                                                                      - State Info: krbExtraData;adcsn-6891e339000500030000;vucsn-6891e339000500030000:: AAI445Focm9vdC9hZG1pbkBBTEQyNTAuUFJPAA==
                                                                                                                      - Date:       Tue Aug  5 13:55:53 2025
                                                                                                               
                                                                                                               - Attribute 'krblastpwdchange' is different:
                                                                                                                    Supplier:
                                                                                                                      - Value:      20250805105517Z
                                                                                                                      - State Info: krbLastPwdChange;vucsn-6891e316000200040001: 20250805105517Z
                                                                                                                      - Date:       Tue Aug  5 13:55:18 2025
                                                                                                               
                                                                                                                    Replica:
                                                                                                                      - Value:      20250805105552Z
                                                                                                                      - State Info: krbLastPwdChange;vucsn-6891e339000400030001: 20250805105552Z
                                                                                                                      - Date:       Tue Aug  5 13:55:53 2025
                                                                                                               
                                                                                                               - Attribute 'krbpasswordexpiration' is different:
                                                                                                                    Supplier:
                                                                                                                      - Value:      20250805105517Z
                                                                                                                      - State Info: krbPasswordExpiration;vucsn-6891e316000200040000: 20250805105517Z
                                                                                                                      - Date:       Tue Aug  5 13:55:18 2025
                                                                                                               
                                                                                                                    Replica:
                                                                                                                      - Value:      20250805105552Z
                                                                                                                      - State Info: krbPasswordExpiration;vucsn-6891e339000400030000: 20250805105552Z
                                                                                                                      - Date:       Tue Aug  5 13:55:53 2025
                                                                                                               
                                                                                                               - Attribute 'givenname' is different:
                                                                                                                    Supplier:
                                                                                                                      - Value:      conflict
                                                                                                                      - State Info: givenName;vucsn-6891e316000000040000: conflict
                                                                                                                      - Date:       Tue Aug  5 13:55:18 2025
                                                                                                               
                                                                                                                    Replica:
                                                                                                                      - Value:      conflicted
                                                                                                                      - State Info: givenName;vucsn-6891e339000100030000: conflicted
                                                                                                                      - Date:       Tue Aug  5 13:55:53 2025
                                                                                                               
                                                                                                               - Attribute 'cn' is different:
                                                                                                                    Supplier:
                                                                                                                      - Value:      conflict User
                                                                                                                      - State Info: cn;vucsn-6891e316000000040000: conflict User
                                                                                                                      - Date:       Tue Aug  5 13:55:18 2025
                                                                                                               
                                                                                                                    Replica:
                                                                                                                      - Value:      conflicted User
                                                                                                                      - State Info: cn;vucsn-6891e339000100030000: conflicted User
                                                                                                                      - Date:       Tue Aug  5 13:55:53 2025
                                                                                                               
                                                                                                               - Attribute 'displayname' is different:
                                                                                                                    Supplier:
                                                                                                                      - Value:      conflict User
                                                                                                                      - State Info: displayName;vucsn-6891e316000000040000: conflict User
                                                                                                                      - Date:       Tue Aug  5 13:55:18 2025
                                                                                                               
                                                                                                                    Replica:
                                                                                                                      - Value:      conflicted User
                                                                                                                      - State Info: displayName;vucsn-6891e339000100030000: conflicted User
                                                                                                                      - Date:       Tue Aug  5 13:55:53 2025
                                                                                                               
                                                                                                               - Attribute 'gecos' is different:
                                                                                                                    Supplier:
                                                                                                                      - Value:      conflict User
                                                                                                                      - State Info: gecos;vucsn-6891e316000000040000: conflict User
                                                                                                                      - Date:       Tue Aug  5 13:55:18 2025
                                                                                                               
                                                                                                                    Replica:
                                                                                                                      - Value:      conflicted User
                                                                                                                      - State Info: gecos;vucsn-6891e339000100030000: conflicted User
                                                                                                                      - Date:       Tue Aug  5 13:55:53 2025
                                                                                                               
                                                                                                               - Attribute 'userpassword' is different:
                                                                                                                    Supplier:
                                                                                                                      - Value:      {PBKDF2-SHA512}10000$+mn7IoPU4om7kLc9I3PS1opkiHJteGzy$uEHe5EuvMJ4c4KOukivH8+46Ohqvx8PuvSamj18k3uQnzgZ1KBl7brBq4yEGzxJc5Y6Ssl0hkxDZ2D0cMPCOLA==
                                                                                                                      - State Info: userPassword;vucsn-6891e316000000040000: {PBKDF2-SHA512}10000$+mn7IoPU4om7kLc9I3PS1opkiHJteGzy$uEHe5EuvMJ4c4KOukivH8+46Ohqvx8PuvSamj18k3uQnzgZ1KBl7brBq4yEGzxJc5Y6Ssl0hkxDZ2D0cMPCOLA==
                                                                                                                      - Date:       Tue Aug  5 13:55:18 2025
                                                                                                               
                                                                                                                    Replica:
                                                                                                                      - Value:      {PBKDF2-SHA512}10000$uPEJ8l/mnTsjJkckyxqqJRIQx/X2OrOI$Wzm9wddHKCb9JOLl4UVQLUk/czorLTUqEOYE6QBT/l4t+B+pXgJ8xXrVmkdnKYyREYmXrpf2XyNPsOoEbzbz8A==
                                                                                                                      - State Info: userPassword;vucsn-6891e339000100030000: {PBKDF2-SHA512}10000$uPEJ8l/mnTsjJkckyxqqJRIQx/X2OrOI$Wzm9wddHKCb9JOLl4UVQLUk/czorLTUqEOYE6QBT/l4t+B+pXgJ8xXrVmkdnKYyREYmXrpf2XyNPsOoEbzbz8A==
                                                                                                                      - Date:       Tue Aug  5 13:55:53 2025
                                                                                                               
                                                                                                               - Attribute 'ipauniqueid' is different:
                                                                                                                    Supplier:
                                                                                                                      - Value:      acbf75f2-71ea-11f0-8dec-02000a452902
                                                                                                                      - State Info: ipaUniqueID;vucsn-6891e316000000040000: acbf75f2-71ea-11f0-8dec-02000a452902
                                                                                                                      - Date:       Tue Aug  5 13:55:18 2025
                                                                                                               
                                                                                                                    Replica:
                                                                                                                      - Value:      c173c7be-71ea-11f0-a685-02000a452904
                                                                                                                      - State Info: ipaUniqueID;vucsn-6891e339000100030000: c173c7be-71ea-11f0-a685-02000a452904
                                                                                                                      - Date:       Tue Aug  5 13:55:53 2025
                                                                                                               
                                                                                                               - Attribute 'krbprincipalkey' is different:
                                                                                                                    Supplier: 
                                                                                                                      - Origin value: b'0\x81\xde\xa0\x03\x02\x01\x01\xa1\x03\x02\x01\x01\xa2\x03\x02\x01\x01\xa3\x03\x02\x01\x01\xa4\x81\xc70\x81\xc40h\xa0\x1b0\x19\xa0\x03\x02\x01\x04\xa1\x12\x04\x10eYQb_EFC-)X>eHD7\xa1I0G\xa0\x03\x02\x01\x12\xa1@\x04> \x00\xcd\xb1\xeaE5Atv\xf9\xc2`\xeb\x97\xbe\xd3;\xc5T\x01\x14b\xd2\xb1\xe6\'\xff|^\x85lL\x10/`\xb3Q\x8c\x95O\x87\xd1\xb4ox!.\xed\x0f8\xd7Wf")\xbba+\x1e/10X\xa0\x1b0\x19\xa0\x03\x02\x01\x04\xa1\x12\x04\x10MF{=:)VKQ|fEio>-\xa1907\xa0\x03\x02\x01\x11\xa10\x04.\x10\x00\xcd\xdd\x0f\x88e\x9c:\xdf\xab\xf5\xee+]"z\x838\xc8\x03\xc40\x0f\x8c3\xe4}\tn\x0et\x8b\x13\x86OR\xc7~\x95:\xd2\x0e"\x14\xa1'
                                                                                                               
                                                                                                                    Replica: 
                                                                                                                      - Origin value: b'0\x81\xde\xa0\x03\x02\x01\x01\xa1\x03\x02\x01\x01\xa2\x03\x02\x01\x01\xa3\x03\x02\x01\x01\xa4\x81\xc70\x81\xc40h\xa0\x1b0\x19\xa0\x03\x02\x01\x04\xa1\x12\x04\x10cB:8<=Y-PH|B4*+k\xa1I0G\xa0\x03\x02\x01\x12\xa1@\x04> \x00_\x1b\x16\x9f\xb4\x8c\xeb\x8b\x8c5uA\xcdK\x02\xa4\xddId\xe3\x9b!\xcf\xe1\xfa\xdb~\xfe\xf9F\xa9j\xdf\x14\xc7\x05\xd9\xe9\xf8\xbe\x03\xc9&\x8f\xea\xb4\xact\xfb\xcf:j\xb8W>GO\x02\xfe\x1b0X\xa0\x1b0\x19\xa0\x03\x02\x01\x04\xa1\x12\x04\x1050QY-;1sSPVip&U$\xa1907\xa0\x03\x02\x01\x11\xa10\x04.\x10\x00Y\xcd\xc4\xb7`2W&\xea\xbal0\x8a\xa0\x87\xa0\x8d\xd8\x85\x9b\xfd\xc4\xe4\xe8\x98\xff\xb0\xa4\x18\x19\x99\x14\xf0\xa9d${\x9e\x95Es\xd1\xb4\xa4'
                                                                                                               
                                                                                                               - Attribute 'uidnumber' is different:
                                                                                                                    Supplier: 
                                                                                                                      - Origin value: b'1213200010'
                                                                                                               
                                                                                                                    Replica: 
                                                                                                                      - Origin value: b'1213300500'
                                                                                                               
                                                                                                               - Attribute 'gidnumber' is different:
                                                                                                                    Supplier: 
                                                                                                                      - Origin value: b'1213200010'
                                                                                                               
                                                                                                                    Replica: 
                                                                                                                      - Origin value: b'1213300500'
                                                                                                               
                                                                                                               
                                                                                                              cn=conflict_user,cn=groups,cn=accounts,dc=ald250,dc=pro
                                                                                                              
                                                                                                            • 
                                                                                                               - Attribute 'gidnumber' is different:
                                                                                                                    Supplier:
                                                                                                                      - Value:      1213200010
                                                                                                                      - State Info: gidNumber;vucsn-6891e316000400040000: 1213200010
                                                                                                                      - Date:       Tue Aug  5 13:55:18 2025
                                                                                                               
                                                                                                                    Replica:
                                                                                                                      - Value:      1213300500
                                                                                                                      - State Info: gidNumber;vucsn-6891e339000600030000: 1213300500
                                                                                                                      - Date:       Tue Aug  5 13:55:53 2025
                                                                                                               
                                                                                                               - Attribute 'ipauniqueid' is different:
                                                                                                                    Supplier:
                                                                                                                      - Value:      accda578-71ea-11f0-8dec-02000a452902
                                                                                                                      - State Info: ipaUniqueID;vucsn-6891e316000400040000: accda578-71ea-11f0-8dec-02000a452902
                                                                                                                      - Date:       Tue Aug  5 13:55:18 2025
                                                                                                               
                                                                                                                    Replica:
                                                                                                                      - Value:      c1a7f6d8-71ea-11f0-a685-02000a452904
                                                                                                                      - State Info: ipaUniqueID;vucsn-6891e339000600030000: c1a7f6d8-71ea-11f0-a685-02000a452904
                                                                                                                      - Date:       Tue Aug  5 13:55:53 2025
                                                                                                               
                                                                                                               
                                                                                                               
                                                                                                              Result
                                                                                                              =====================================================
                                                                                                               
                                                                                                              There are replication differences between Supplier and Replica|
                                                                                                              Отчет показывает расхождения между серверами dc01.ald250.pro (Supplier) и dc02.ald250.pro (Replica). Разберем ключевые проблемы:
                                                                                                              1. Состояние репликации (Database RUV's)

• Replica is behind Supplier by: 95456 секунд (~26.5 часов) - реплика серьезно отстает
• Расхождения в RUV (Replica Update Vectors):
  • Для replica 4 (dc01): 687a55c1000100040000 68934c91000000040000 (Supplier) vs 687a55c1000100040000 6891d7b1000000040000 (Replica)

2. Количественные расхождения

• Записей: 3703 (Supplier) vs 3813 (Replica) - на реплике больше записей

3. Конфликтующие записи
Обнаружено 2 конфликтующие записи (те, что мы создавали)
4. Отсутствующие записи
На реплике отсутствуют (9 записей):

• 3 записи в users_history (a1_9tpl..., a2_dyj..., ansible)
• 2 удаленных пользователя (uid=a1, uid=a2) (создавались и удалились отдельно вне воспроизведения)
• Роль test_role (создавалась отдельно, вне воспроизведения)
• Запись журнала journal.ald250.pro
• Запись аудита login

На основном сервере отсутствуют (52 записи):

• Структура compat (пользователи, группы)
• Записи sudoers

5. Несоответствия атрибутов
Для пользователя conflict_user:

• SID: S-1-5-21-...1010 (Supplier) vs S-1-5-21...-101500 (Replica)
• Пароли: разные хеши PBKDF2-SHA512
• UID/GID: 1213200010 vs 1213300500
• Данные Kerberos: krbLastPwdChange, krbExtraData различаются
• Имена: "conflict User" vs "conflicted User"

Для компьютера journal.ald250.pro:

• Отсутствуют атрибуты rbtaSubsystem* на реплике
• Различия в objectClass (на Supplier больше классов)

Для repl keep alive:

• Метки времени: 20250806123737Z (Supplier) vs 20250805093737Z (Replica)

Для DNA-плагина:

• dnaRemainingValues: 100489 (Supplier) vs 199992 (Replica)

Для пользователя testuser:

• Атрибут 'telephonenumber': +111111111 (Supplier) vs +33333333 (Replica)

Практическое решение проблем репликации

Начнем с вывода и решения конфликтов, которые показывает dsconf:

Посмотрим конфликты для cn=conflict_user+nsuniqueid=adc2dc05-71ea11f0-816fe86f-aa36b0da,cn=groups,cn=accounts,dc=ald250,dc=pro

Оставим только cn=conflict_user,cn=groups,cn=accounts,dc=ald250,dc=pro:

По такому же принципу разрешим 2й конфликт:

Перезагружаем dirsrv и проверяем вывод ds-replcheck:

Видим сообщение Replication State: Supplier and Replica are in perfect synchronization, означающее что синхронизация прошла успешно.
Остальные конфликтующие записи разрешились самостоятельно,  вывод команды говорит о расхождении записей каталога compat - на реплике записи присутствуют, а на 1КД - нет.  Данные записи не влияют на работу ALD Pro, они относятся к плагину Schema Compatibility и этот плагин можно отключить. Данная структура не переносится при реинициализации реплики. 
Отключим плагин на 2м КД и перезагрузим dirsrv:

И при выполнении команды ds-replcheck получаем идеальный результат:

Реинициализация реплики

В сложных случаях может потребоваться полная реинициализация реплики:

• Создайте резервную копию:

  ipa-backup -vd --online --data

• Выполните реинициализацию на 2м КД:

  ipa-replica-manage -dv re-initialize --from <имя_первого_КД>

• Проверьте идентичность данных:

  ds-replcheck online -D "cn=Directory Manager" -W -m ldap://<имя_первого_КД>:389 -r ldap://<имя_реплики>:389 -b <доменный_суффикс> -i memberof,idnssoaserial,entryusn,krblastsuccessfulauth,krblastfailedauth,krbloginfailedcount

  Почему сразу не делать реинициализацию?

  Причины:

1. Производительность: Реинициализация требует полной пересылки всех данных (часы простоя для больших каталогов).
2. Риски: Может привести к потере локальных изменений, если выполнена некорректно.
3. Маскировка проблем: Не устраняет корневые причины конфликтов (например, неправильную топологию репликации).

Когда точно нужна реинициализация:

• После сбоя жёсткого диска на реплике
• При расхождениях в более чем 5-10% записей
• После изменения схемы данных

Что проверять при сравнении данных после реинициализации?

В выводе ds-replcheck должно быть:

Критичные параметры:

• memberof - должно совпадать членство в группах
• idnssoaserial - идентичность DNS-зон
• krblastfailedauth - чтобы не блокировать легитимных пользователей

Полезные команды

Проверка расхождений записей пользователей, компьютеров и подразделений:

'^\[a-zA-Z0-9.-\]+:'

'^\[a-zA-Z0-9.-\]+:'

'^\[a-zA-Z0-9.-\]+:'

Где <PASSWORD> - пароль УЗ Directory Manager Вывести служебную информацию Replica Update Vectors (RUV), о состоянии репликации между серверами FreeIPA :

Проверка статуса репликации между всеми серверами:

На вопрос Enter a bind DN for <server>:389 ответьте cn="Directory Manager"
Вывести информацию о группе узлов ipaservers:

Удаление всех конфликтов:

Заключение

Регулярный мониторинг и соблюдение рекомендаций по разрешению конфликтов помогут избежать проблем с согласованностью данных.

Моделирование ошибок репликации

• Подготовка тестовой среды
• Этап 1: Создаем namingConflict (ADD)
• Этап 2: Создаем attribute/modification конфликт
• Результат:

Подготовка тестовой среды

1. Создадим тестовую OU и пользователя (выполняем команду на 1КД):

   kinit admin suffix=$(ldapsearch -Q -LLL -s base

   grep 'dn: '

   cut -d ' ' -f2) dc=$(hostname -f) domain=$(hostname -d)   ldapadd -h $dc -D "cn=Directory Manager" -W <<EOF dn: ou=test_repl,ou=$domain,cn=orgunits,cn=accounts,$suffix objectClass: rbta-org-unit ou: test_repl displayName: test_repl EOF   ipa user-add testuser \ --first="Test" \ --last="User" \ --random   ldapmodify -h $dc -D "cn=Directory Manager" -W <<EOF dn: uid=testuser,cn=users,cn=accounts,$suffix changetype: modify replace: rbtadp rbtadp: ou=test_repl,ou=$domain,cn=orgunits,cn=accounts,$suffix

• 
  replace: rbtaou
  rbtaou: test_repl
  EOF|
  Code block 2 На КД1

1. Проверим репликацию (выполняем команду на 2КД):

   kinit admin suffix=$(ldapsearch -Q -LLL -s base

   grep 'dn: '

   cut -d ' ' -f2) dc=$(hostname -f) domain=$(hostname -d) ldapsearch -h $dc -D "cn=Directory Manager" -W -b "ou=test_repl,ou=$domain,cn=orgunits,cn=accounts,$suffix"

   
   

   Этап 1: Создаем namingConflict (ADD)

• Остановим репликацию (выполняем команды на обоих серверах):

  read -p "Введите короткое доменное имя 2 КД (например dc02): " DC2 domain=$(hostname -d) dc=$(hostname -f) suffix=$(ldapsearch -Q -LLL -s base

  grep 'dn: '

  cut -d ' ' -f2) escaped_suffix=$(echo "$suffix"

  sed -e 's/=/ 3D/g' -e 's/,/ 2C/g')   ldapmodify -h $dc -D "cn=Directory Manager" -W <<EOF dn: cn=meTo${DC2}.${domain},cn=replica,cn=${escaped_suffix},cn=mapping tree,cn=config changetype: modify replace: nsDS5ReplicaEnabled nsDS5ReplicaEnabled: off EOF

• Создадим конфликтующую запись (на обоих кд):

  ipa user-add conflict_user \ --first="conflict" \ --last="User" \ --random

  
  
• Включим репликацию:

  read -p "Введите короткое доменное имя 2 КД (например dc02): " DC2 domain=$(hostname -d) dc=$(hostname -f) suffix=$(ldapsearch -Q -LLL -s base

  grep 'dn: '

  cut -d ' ' -f2) escaped_suffix=$(echo "$suffix"

  sed -e 's/=/ 3D/g' -e 's/,/ 2C/g')   ldapmodify -h $dc -D "cn=Directory Manager" -W <<EOF dn: cn=meTo${DC2}.${domain},cn=replica,cn=${escaped_suffix},cn=mapping tree,cn=config changetype: modify replace: nsDS5ReplicaEnabled nsDS5ReplicaEnabled: on EOF

• Проверим конфликты:

  dc=$(hostname -f) suffix=$(ldapsearch -Q -LLL -s base

  grep 'dn: '

  cut -d ' ' -f2) dsconf ldap://$dc -D "cn=Directory Manager" repl-conflict list $suffix

  Пример вывода:

  dn: nsuniqueid=adc2dc01-71ea11f0-816fe86f-aa36b0da+uid=conflict_user,cn=users,cn=accounts,dc=ald250,dc=pro cn: conflicted User displayName: conflicted User gecos: conflicted User gidNumber: 1213300500 givenName: conflicted homeDirectory: /home/conflict_user initials: cU ipaNTSecurityIdentifier: S-1-5-21-196329585-3226835358-3389735258-101500 ipaUniqueID: c173c7be-71ea-11f0-a685-02000a452904 krbCanonicalName: conflict_user@ALD250.PRO krbExtraData:: AAI445Focm9vdC9hZG1pbkBBTEQyNTAuUFJPAA== krbLastPwdChange: 20250805105552Z krbPasswordExpiration: 20250805105552Z krbPrincipalKey:: MIHeoAMCAQGhAwIBAaIDAgEBowMCAQGkgccwgcQwaKAbMBmgAwIBBKESBBBjQjo4PD1ZLVBIfEI0KitroUkwR6ADAgESoUAEPiAAXxsWn7SM64uMNXVBzUsCpN1JZOObIc/h+tt+/vlGqWrfFMcF2en4vgPJJo/qtKx0+886arhXPkdPAv4bMFigGzAZoAMCAQShEgQQNTBRWS07MXNTUFZpcCZVJKE5MDegAwIBEaEwBC4QAFnNxLdgMlcm6rpsMIqgh6CN2IWb/cTk6Jj/sKQYGZkU8KlkJHuelUVz0bSk krbPrincipalName: conflict_user@ALD250.PRO loginShell: /bin/bash mail: conflict_user@ald250.pro mepManagedEntry: cn=conflict_user,cn=groups,cn=accounts,dc=ald250,dc=pro nsds5replconflict: namingConflict (ADD) uid=conflict_user,cn=users,cn=accounts,dc=ald250,dc=pro objectClass: top objectClass: person objectClass: organizationalperson objectClass: inetorgperson objectClass: inetuser objectClass: posixaccount objectClass: krbprincipalaux objectClass: krbticketpolicyaux objectClass: ipaobject objectClass: ipasshuser objectClass: x-ald-user objectClass: x-ald-user-parsec14 objectClass: x-ald-audit-policy objectClass: rbta-unit objectClass: rbta-address objectClass: rbtaCustomUserAttrs objectClass: rbta-inetorgperson-ext objectClass: ruPostMailAccount objectClass: rbtaUserMeta objectClass: ipaSshGroupOfPubKeys objectClass: ldapsubentry objectClass: mepOriginEntry objectClass: ipantuserattrs proxyAddresses: SMTP:CONFLICT_USER@ALD250.PRO rbtadp: ou=ald250.pro,cn=orgunits,cn=accounts,dc=ald250,dc=pro rbtaou: ald250.pro sn: User uid: conflict_user uidNumber: 1213300500 userPassword: {PBKDF2-SHA512}10000$uPEJ8l/mnTsjJkckyxqqJRIQx/X2OrOI$Wzm9wddHKCb9JOLl4UVQLUk/czorLTUqEOYE6QBT/l4t+B+pXgJ8xXrVmkdnKYyREYmXrpf2XyNPsOoEbzbz8A== x-ald-user-mac: 0:0x0:0:0x0 xaldusermacmax: 0 xaldusermacmin: 0 dn: cn=conflict_user+nsuniqueid=adc2dc05-71ea11f0-816fe86f-aa36b0da,cn=groups,cn=accounts,dc=ald250,dc=pro cn: conflict_user description: User private group for conflict_user gidNumber: 1213300500 ipaUniqueID: c1a7f6d8-71ea-11f0-a685-02000a452904 mepManagedBy: uid=conflict_user,cn=users,cn=accounts,dc=ald250,dc=pro nsds5replconflict: namingConflict (ADD) cn=conflict_user,cn=groups,cn=accounts,dc=ald250,dc=pro objectClass: posixgroup objectClass: ipaobject objectClass: mepManagedEntry objectClass: top objectClass: ldapsubentry

  
  
  

  Этап 2: Создаем attribute/modification конфликт

• Снова останавливаем репликацию:

  read -p "Введите короткое доменное имя 2 КД (например dc02): " DC2 domain=$(hostname -d) dc=$(hostname -f) suffix=$(ldapsearch -Q -LLL -s base

  grep 'dn: '

  cut -d ' ' -f2) escaped_suffix=$(echo "$suffix"

  sed -e 's/=/ 3D/g' -e 's/,/ 2C/g')   ldapmodify -h $dc -D "cn=Directory Manager" -W <<EOF dn: cn=meTo${DC2}.${domain},cn=replica,cn=${escaped_suffix},cn=mapping tree,cn=config changetype: modify replace: nsDS5ReplicaEnabled nsDS5ReplicaEnabled: off EOF

• Модифицируем запись по-разному:

  read -p "Введите короткое доменное имя 2 КД (например dc02): " DC2 domain=$(hostname -d) dc=$(hostname -f) suffix=$(ldapsearch -Q -LLL -s base

  grep 'dn: '

  cut -d ' ' -f2)

1. На КД1 изменяем телефон
   ldapmodify -h $dc -D "cn=Directory Manager" -W <<EOF
   dn: uid=testuser,cn=users,cn=accounts,$suffix
   changetype: modify
   replace: telephoneNumber
   telephoneNumber: +111111111
   EOF
    
   
2. На КД2 изменяем email
   ldapmodify -h $5DC2.$domain -D "cn=Directory Manager" -W <<EOF
   dn: uid=testuser,cn=users,cn=accounts,$suffix
   changetype: modify
   replace: mail
   mail: test@example.com
   EOF|

• Включаем репликацию и проверяем:

  read -p "Введите короткое доменное имя 2 КД (например dc02): " DC2 domain=$(hostname -d) dc=$(hostname -f) suffix=$(ldapsearch -Q -LLL -s base

  grep 'dn: '

  cut -d ' ' -f2) escaped_suffix=$(echo "$suffix"

  sed -e 's/=/ 3D/g' -e 's/,/ 2C/g')   ldapmodify -h $dc -D "cn=Directory Manager" -W <<EOF dn: cn=meTo${DC2}.${domain},cn=replica,cn=${escaped_suffix},cn=mapping tree,cn=config changetype: modify replace: nsDS5ReplicaEnabled nsDS5ReplicaEnabled: on EOF

  
  

  read -p "Введите короткое доменное имя 2 КД (например dc02): " DC2 domain=$(hostname -d) dc=$(hostname -f) suffix=$(ldapsearch -Q -LLL -s base

  grep 'dn: '

  cut -d ' ' -f2) ds-replcheck online -D "cn=Directory Manager" -W -m ldap://$dc:389 -r ldap://$DC2.$domain:389 -b "$suffix" -i memberof,idnssoaserial,entryusn,krblastsuccessfulauth,krblastfailedauth,krbloginfailedcount

  Результат:

  Enter password:  ================================================================================          Replication Synchronization Report  (Wed Aug  6 15:50:57 2025) ================================================================================     Database RUV's =====================================================   Supplier RUV:   {replica 3 ldap://dc02.ald250.pro:389} 687a55d0000100030000 68934868000000030000   {replica 4 ldap://dc01.ald250.pro:389} 687a55c1000100040000 68934c91000000040000   {replicageneration} 687a55c1000000040000   Replica RUV:   {replica 3 ldap://dc02.ald250.pro:389} 687a55d0000100030000 68934868000000030000   {replica 4 ldap://dc01.ald250.pro:389} 687a55c1000100040000 6891d7b1000000040000   {replicageneration} 687a55c1000000040000   Replication State: Replica is behind Supplier by: 95456 seconds     Entry Counts =====================================================   Supplier:  3703 Replica: 3813     Tombstones =====================================================   Supplier:  17 Replica: 10     Conflict Entries =====================================================   Supplier Conflict Entries:  2     Missing Entries =====================================================     Entries missing on Replica:    - cn=a1_9tplmxnqe0duwgnf5rk7dku1hhc6,cn=users_history,cn=accounts,dc=ald250,dc=pro  (Created on Supplier at: Tue Aug  5 10:51:28 2025)    - cn=a2_dyj6exrhicuii991av19kqyoipsv,cn=users_history,cn=accounts,dc=ald250,dc=pro  (Created on Supplier at: Tue Aug  5 10:52:16 2025)    - cn=conflict_user_3m98nnfmo7u7d2rsx,cn=users_history,cn=accounts,dc=ald250,dc=pro  (Created on Supplier at: Tue Aug  5 10:55:18 2025)    - uid=a1,cn=deleted users,cn=accounts,cn=provisioning,dc=ald250,dc=pro  (Created on Supplier at: Tue Aug  5 12:44:10 2025)    - uid=a2,cn=deleted users,cn=accounts,cn=provisioning,dc=ald250,dc=pro  (Created on Supplier at: Tue Aug  5 12:44:11 2025)    - cn=test_role,cn=roles,cn=accounts,dc=ald250,dc=pro  (Created on Supplier at: Wed Aug  6 08:36:15 2025)    - cn=journal.ald250.pro,cn=log,cn=services,cn=aldpro,cn=etc,dc=ald250,dc=pro  (Created on Supplier at: Wed Aug  6 09:58:46 2025)    - cn=ansible,cn=users_history,cn=accounts,dc=ald250,dc=pro  (Created on Supplier at: Wed Aug  6 09:59:51 2025)    - cn=login,cn=audit,dc=ald250,dc=pro  (Created on Supplier at: Wed Aug  6 09:59:52 2025)     Entries missing on Supplier:    - cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:57 2025)    - cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:57 2025)    - uid=conflict_user,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - uid=testuser,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - uid=admin,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ng,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:57 2025)    - cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:57 2025)    - cn=conflict_user,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - cn=testuser,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - cn=print_admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=Default\20SMB\20Group,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ald\20trust\20admin,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=editors,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=computers,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:57 2025)    - ou=sudoers,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:57 2025)    - cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:56 2025)    - cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:56 2025)    - uid=conflict_user,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - uid=testuser,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - uid=admin,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ng,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:56 2025)    - cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:56 2025)    - cn=conflict_user,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - cn=testuser,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - cn=print_admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=Default\20SMB\20Group,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ald\20trust\20admin,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=editors,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=computers,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:56 2025)    - ou=sudoers,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:56 2025)    - cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:56 2025)    - cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:56 2025)    - uid=conflict_user,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - uid=testuser,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - uid=admin,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ng,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:56 2025)    - cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:56 2025)    - cn=conflict_user,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - cn=testuser,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - cn=print_admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=Default\20SMB\20Group,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ald\20trust\20admin,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=editors,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=computers,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:56 2025)    - ou=sudoers,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:56 2025)    - cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:55 2025)    - cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:55 2025)    - uid=conflict_user,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - uid=testuser,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - uid=admin,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ng,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:55 2025)    - cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:55 2025)    - cn=conflict_user,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - cn=testuser,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - cn=print_admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=Default\20SMB\20Group,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ald\20trust\20admin,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=editors,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=computers,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:55 2025)    - ou=sudoers,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:55 2025)    - cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:55 2025)    - cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:55 2025)    - uid=conflict_user,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - uid=testuser,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - uid=admin,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ng,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:55 2025)    - cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:55 2025)    - cn=conflict_user,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - cn=testuser,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - cn=print_admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=Default\20SMB\20Group,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ald\20trust\20admin,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=editors,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=computers,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:55 2025)    - ou=sudoers,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:55 2025)    - cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:54 2025)    - cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:54 2025)    - uid=conflict_user,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - uid=testuser,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - uid=admin,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ng,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:54 2025)    - cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:54 2025)    - cn=conflict_user,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - cn=testuser,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - cn=print_admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=Default\20SMB\20Group,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ald\20trust\20admin,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=editors,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=computers,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:54 2025)    - ou=sudoers,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:54 2025)    - cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:54 2025)    - cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:54 2025)    - uid=conflict_user,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - uid=testuser,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - uid=admin,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ng,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:54 2025)    - cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:54 2025)    - cn=conflict_user,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - cn=testuser,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - cn=print_admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=Default\20SMB\20Group,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ald\20trust\20admin,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=editors,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=computers,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:54 2025)    - ou=sudoers,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:54 2025)    - cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:53 2025)    - cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:53 2025)    - uid=conflict_user,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - uid=testuser,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - uid=admin,cn=users,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ng,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:53 2025)    - cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:53 2025)    - cn=conflict_user,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:55:53 2025)    - cn=testuser,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Tue Aug  5 10:06:38 2025)    - cn=print_admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=Default\20SMB\20Group,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=ald\20trust\20admin,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=editors,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=admins,cn=groups,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Fri Jul 18 14:19:28 2025)    - cn=computers,cn=compat,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:53 2025)    - ou=sudoers,dc=ald250,dc=pro  (Created on Replica at: Wed Aug  6 12:50:53 2025)     Entry Inconsistencies =====================================================   cn=log,cn=services,cn=aldpro,cn=etc,dc=ald250,dc=pro

  • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • 
                                                                                                         - Attribute 'aci' is different:
                                                                                                              Supplier:
                                                                                                                - Value:      (targetattr = "*")(target = "ldap
                                                                                                                - State Info: aci;vucsn-68932756000400040000: (targetattr = "*")(target = "ldap:///cn=log,cn=services,cn=aldpro,cn=etc,dc=ald250,dc=pro")(version 3.0;acl "Read service log container by host journal.ald250.pro";allow (compare,read,search) userdn = "ldap:///fqdn=journal.ald250.pro,cn=computers,cn=accounts,dc=ald250,dc=pro"
                                                                                                                - Date:       Wed Aug  6 12:58:46 2025
                                                                                                         
                                                                                                                - Value:      (targetattr = "cn || envvar")(target = "ldap
                                                                                                                - State Info: aci;vucsn-68932757000000040000: (targetattr = "cn || envvar")(target = "ldap:///cn=journal.ald250.pro,cn=log,cn=services,cn=aldpro,cn=etc,dc=ald250,dc=pro")(version 3.0;acl "Read service log envvar by host journal.ald250.pro";allow (compare,read,search) userdn = "ldap:///fqdn=journal.ald250.pro,cn=computers,cn=accounts,dc=ald250,dc=pro"
                                                                                                                - Date:       Wed Aug  6 12:58:47 2025
                                                                                                         
                                                                                                              Replica: 
                                                                                                                - Origin value: b'(targetattr = "")(targetfilter = "(objectClass=)")(version 3.0;acl "permission:ALDPRO - Add Event Log Servers";allow (add) groupdn = "ldap:///cn=ALDPRO - Add Event Log Servers,cn=permissions,cn=pbac,dc=ald250,dc=pro"'
                                                                                                                - Origin value: b'(targetattr = "")(targetfilter = "(objectClass=)")(version 3.0;acl "permission:ALDPRO - Read Event Log Servers";allow (compare,read,search) groupdn = "ldap:///cn=ALDPRO - Read Event Log Servers,cn=permissions,cn=pbac,dc=ald250,dc=pro"'
                                                                                                                - Origin value: b'(targetattr = "")(targetfilter = "(objectClass=)")(version 3.0;acl "permission:ALDPRO - Remove Event Log Servers";allow (delete) groupdn = "ldap:///cn=ALDPRO - Remove Event Log Servers,cn=permissions,cn=pbac,dc=ald250,dc=pro"'
                                                                                                                - Origin value: b'(targetattr = "rbtaServiceName || servicerole || cn || rbtasite || objectClass")(targetfilter = "(objectclass=rbta-aldpro-service-instance)")(version 3.0;acl "permission:ALDPRO ROCO Event Log Servers - Read";allow (read,search,compare) groupdn = "ldap:///cn=ALDPRO ROCO Event Log Servers - Read,cn=permissions,cn=pbac,dc=ald250,dc=pro"'
                                                                                                                - Origin value: b'(targetattr = "rbtasite || servicerole")(targetfilter = "(objectClass=*)")(version 3.0;acl "permission:ALDPRO - Modify Event Log Servers";allow (write) groupdn = "ldap:///cn=ALDPRO - Modify Event Log Servers,cn=permissions,cn=pbac,dc=ald250,dc=pro"'
                                                                                                         
                                                                                                         
                                                                                                        cn=ALDPRO ROCO Attributes Mapping - Read,cn=privileges,cn=pbac,dc=ald250,dc=pro
                                                                                                        
                                                                                                        • • • • • • • • • • • • • • • • • • • • • • • • • • • 
                                                                                                                                                               - Attribute 'member' is different:
                                                                                                                                                                    Supplier:
                                                                                                                                                                      - Value:      cn=ALDPRO - Main Administrator,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                      - State Info: member;adcsn-68931de1000200040000;vucsn-68931de1000200040000: cn=ALDPRO - Main Administrator,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                      - Date:       Wed Aug  6 12:18:25 2025
                                                                                                                                                               
                                                                                                                                                                      - Value:      cn=ALDPRO - Domain Viewer,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                      - State Info: member;vucsn-68931de1000200040000: cn=ALDPRO - Domain Viewer,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                      - Date:       Wed Aug  6 12:18:25 2025
                                                                                                                                                               
                                                                                                                                                                      - Value:      cn=ALDPRO - Syncer Attributes Mapping Administrators,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                      - State Info: member;vucsn-68931de1000200040000: cn=ALDPRO - Syncer Attributes Mapping Administrators,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                      - Date:       Wed Aug  6 12:18:25 2025
                                                                                                                                                               
                                                                                                                                                                      - Value:      cn=test_role,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                      - State Info: member;vucsn-68931de1000200040000: cn=test_role,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                      - Date:       Wed Aug  6 12:18:25 2025
                                                                                                                                                               
                                                                                                                                                                    Replica: 
                                                                                                                                                                      - Origin value: b'cn=ALDPRO - Domain Viewer,cn=roles,cn=accounts,dc=ald250,dc=pro'
                                                                                                                                                                      - Origin value: b'cn=ALDPRO - Main Administrator,cn=roles,cn=accounts,dc=ald250,dc=pro'
                                                                                                                                                                      - Origin value: b'cn=ALDPRO - Syncer Attributes Mapping Administrators,cn=roles,cn=accounts,dc=ald250,dc=pro'
                                                                                                                                                               
                                                                                                                                                               
                                                                                                                                                              cn=ALDPRO ROCO Attributes Mapping - Manage,cn=privileges,cn=pbac,dc=ald250,dc=pro
                                                                                                                                                              
                                                                                                                                                              • • 
                                                                                                                                                                   - Attribute 'member' is different:
                                                                                                                                                                        Supplier:
                                                                                                                                                                          - Value:      cn=ALDPRO - Main Administrator,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                          - State Info: member;adcsn-68931de0000100040000;vucsn-68931de0000100040000: cn=ALDPRO - Main Administrator,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                          - Date:       Wed Aug  6 12:18:24 2025
                                                                                                                                                                   
                                                                                                                                                                          - Value:      cn=ALDPRO - Syncer Attributes Mapping Administrators,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                          - State Info: member;vucsn-68931de0000100040000: cn=ALDPRO - Syncer Attributes Mapping Administrators,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                          - Date:       Wed Aug  6 12:18:24 2025
                                                                                                                                                                   
                                                                                                                                                                          - Value:      cn=test_role,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                          - State Info: member;vucsn-68931de0000100040000: cn=test_role,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                          - Date:       Wed Aug  6 12:18:24 2025
                                                                                                                                                                   
                                                                                                                                                                        Replica: 
                                                                                                                                                                          - Origin value: b'cn=ALDPRO - Main Administrator,cn=roles,cn=accounts,dc=ald250,dc=pro'
                                                                                                                                                                          - Origin value: b'cn=ALDPRO - Syncer Attributes Mapping Administrators,cn=roles,cn=accounts,dc=ald250,dc=pro'
                                                                                                                                                                   
                                                                                                                                                                   
                                                                                                                                                                  cn=ALDPRO - Organizational Units Administrators,cn=roles,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                  
                                                                                                                                                                  • • • • 
                                                                                                                                                                           - Replica missing attribute: "member"
                                                                                                                                                                           
                                                                                                                                                                           - Supplier's State Info: member;adcsn-68930940000000040000;vucsn-68930940000000040000: uid=testuser,cn=users,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                           - Date: Wed Aug  6 10:50:24 2025
                                                                                                                                                                           
                                                                                                                                                                           
                                                                                                                                                                          fqdn=journal.ald250.pro,cn=computers,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                          

                                                                                                                                • \\  - Replica missing attribute: <span style="color: #003366">"rbtasubsystemconfigstate"</span> \\   \\  - Supplier's State Info: rbtaSubsystemConfigState;adcsn-68932eab000000040000;vucsn-68932eab000000040000: \{<span style="color: #003366">"state"</span>: <span style="color: #003366">"applied"</span>\} \\  - Date: Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">13</span>:<span style="color: #009900">30</span>:<span style="color: #009900">03</span> <span style="color: #009900">2025</span> \\   \\  - Replica missing attribute: <span style="color: #003366">"rbtasubsystemconfig"</span> \\   \\  - Supplier's State Info: rbtaSubsystemConfig;adcsn-6893278e000400040000;vucsn-6893278e000400040000: \{<span style="color: #003366">"is_master"</span>: <span style="color: #336699"><strong>true</strong></span>\} \\  - Date: Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">59</span>:<span style="color: #009900">42</span> <span style="color: #009900">2025</span> \\   \\  - Replica missing attribute: <span style="color: #003366">"rbtasubsystemversionald"</span> \\   \\  - Supplier's State Info: rbtaSubsystemVersionAld;adcsn-6893278e000300040000;vucsn-6893278e000300040000: <span style="color: #009900">2.5</span>.<span style="color: #009900">0</span> \\  - Date: Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">59</span>:<span style="color: #009900">42</span> <span style="color: #009900">2025</span> \\   \\  - Replica missing attribute: <span style="color: #003366">"rbtasubsystemstate"</span> \\   \\  - Supplier's State Info: rbtaSubsystemState;adcsn-6893278e000200040000;vucsn-6893278e000200040000: installed \\  - Date: Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">59</span>:<span style="color: #009900">42</span> <span style="color: #009900">2025</span> \\   \\  - Replica missing attribute: <span style="color: #003366">"rbtasubsystemmetainfo"</span> \\   \\  - Supplier's State Info: rbtaSubsystemMetainfo;adcsn-6893278e000100040000;vucsn-6893278e000100040000: \{<span style="color: #003366">"state"</span>: <span style="color: #003366">"installed"</span>, <span style="color: #003366">"location"</span>: <span style="color: #003366">"hq"</span>, <span style="color: #003366">"role"</span>: <span style="color: #003366">"log"</span>, <span style="color: #003366">"site"</span>: <span style="color: #003366">"\u0413\u043e\u043b\u043e\u0432\u043d\u043e\u0439 \u043e\u0444\u0438\u0441"</span>, <span style="color: #003366">"state_created"</span>: <span style="color: #003366">"20250806095846Z"</span>, <span style="color: #003366">"state_updated"</span>: <span style="color: #003366">"20250806095942Z"</span>, <span style="color: #003366">"version_ald"</span>: <span style="color: #003366">"2.5.0"</span>\} \\  - Date: Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">59</span>:<span style="color: #009900">42</span> <span style="color: #009900">2025</span> \\   \\  - Replica missing attribute: <span style="color: #003366">"rbtasubsystemlog"</span> \\   \\  - Supplier's State Info: rbtaSubsystemLog;adcsn-6893278e000000040000;vucsn-6893278e000000040000: \[\{<span style="color: #003366">"timestamp"</span>: <span style="color: #003366">"2025-08-06T09:58:46Z"</span>, <span style="color: #003366">"code"</span>: <span style="color: #009900">1</span>, <span style="color: #003366">"desc"</span>: <span style="color: #003366">"\u041e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0430"</span>\}, \{<span style="color: #003366">"timestamp"</span>: <span style="color: #003366">"2025-08-06T09:59:33.660699Z"</span>, <span style="color: #003366">"code"</span>: <span style="color: #009900">9</span>, <span style="color: #003366">"desc"</span>: <span style="color: #003366">"\u041d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430"</span>\}, \{<span style="color: #003366">"timestamp"</span>: <span style="color: #003366">"2025-08-06T09:59:42.119576Z"</span>, <span style="color: #003366">"code"</span>: <span style="color: #009900">2</span>, <span style="color: #003366">"desc"</span>: <span style="color: #003366">"\u0421\u0435\u0440\u0432\u0435\u0440 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d"</span>\}\] \\  - Date: Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">59</span>:<span style="color: #009900">42</span> <span style="color: #009900">2025</span> \\   \\  - Replica missing attribute: <span style="color: #003366">"rbtasubsystemsite"</span> \\   \\  - Supplier's State Info: rbtaSubsystemSite;vucsn-<span style="color: #009900">68932756000000040006</span>:: 0JPQvtC70L7QstC90L7QuSDQvtGE0LjRgQ== \\  - Date: Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\  - Replica missing attribute: <span style="color: #003366">"rbtasubsystemrole"</span> \\   \\  - Supplier's State Info: rbtaSubsystemRole;vucsn-<span style="color: #009900">68932756000000040005</span>: log \\  - Date: Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\  - Replica missing attribute: <span style="color: #003366">"aldprochangesauthtor"</span> \\   \\  - Supplier's State Info: aldproChangesAuthtor;vucsn-<span style="color: #009900">68932756000000040000</span>: cn=admin_353bd1beb59483655e479012fc,cn=users_history,cn=accounts,dc=ald250,dc=pro \\  - Date: Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\  - Replica missing attribute: <span style="color: #003366">"aci"</span> \\   \\  - Supplier's State Info: aci;vucsn-<span style="color: #009900">68932756000200040000</span>: (targetattr = <span style="color: #003366">"objectclass || rbtaSubsystemCredentials || rbtaSubsystemMetainfo || rbtaSubsystemLog || rbtaSubsystemConfig || rbtaSubsystemRole || rbtaSubsystemVersionAld || rbtaSubsystemState || rbtaSubsystemConfigState || rbtaSubsystemSite || rbta-csr || rbta-crt"</span>)(target = <span style="color: #003366">"ldap:///fqdn=journal.ald250.pro,cn=computers,cn=accounts,dc=ald250,dc=pro"</span>)(version <span style="color: #009900">3.0</span>;acl <span style="color: #003366">"Read on behalf of the host"</span>;allow (compare,read,search) userdn = <span style="color: #003366">"ldap:///fqdn=journal.ald250.pro,cn=computers,cn=accounts,dc=ald250,dc=pro"</span>;) \\  - Date: Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\  - Supplier's State Info: aci;vucsn-<span style="color: #009900">68932756000300040000</span>: (targetattr = <span style="color: #003366">"rbtaSubsystemCredentials || rbtaSubsystemMetainfo || rbtaSubsystemLog || rbtaSubsystemConfig || rbtaSubsystemVersionAld || rbtaSubsystemState || rbtaSubsystemConfigState || rbta-csr || rbta-crt"</span>)(target = <span style="color: #003366">"ldap:///fqdn=journal.ald250.pro,cn=computers,cn=accounts,dc=ald250,dc=pro"</span>)(version <span style="color: #009900">3.0</span>;acl <span style="color: #003366">"Write on behalf of the host"</span>;allow (add,write,delete) userdn = <span style="color: #003366">"ldap:///fqdn=journal.ald250.pro,cn=computers,cn=accounts,dc=ald250,dc=pro"</span>;) \\  - Date: Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\  - Attribute <span style="color: #003366">'objectclass'</span> is different: \\       Supplier: \\         - Value:      ipaobject \\         - State Info: objectClass;adcsn-<span style="color: #009900">68932756000000040001</span>;vucsn-<span style="color: #009900">68932756000000040001</span>: ipaobject \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      ieee802device \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: ieee802device \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      ipaSshGroupOfPubKeys \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: ipaSshGroupOfPubKeys \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      ipahost \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: ipahost \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      ipaservice \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: ipaservice \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      ipasshhost \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: ipasshhost \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      krbprincipal \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: krbprincipal \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      krbprincipalaux \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: krbprincipalaux \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      nshost \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: nshost \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      pkiuser \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: pkiuser \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      rbta-address \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: rbta-address \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      rbta-subsystem \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: rbta-subsystem \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      rbta-subsystem-pkiproxy \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: rbta-subsystem-pkiproxy \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      rbta-unit \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: rbta-unit \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\         - Value:      top \\         - State Info: objectClass;vucsn-<span style="color: #009900">68932756000000040001</span>: top \\         - Date:       Wed Aug  <span style="color: #009900">6</span> <span style="color: #009900">12</span>:<span style="color: #009900">58</span>:<span style="color: #009900">46</span> <span style="color: #009900">2025</span> \\   \\       Replica:  \\         - Origin value: ieee802device \\         - Origin value: ipasshgroupofpubkeys \\         - Origin value: ipahost \\         - Origin value: ipaobject \\         - Origin value: ipaservice \\         - Origin value: ipasshhost \\         - Origin value: krbprincipal \\         - Origin value: krbprincipalaux \\         - Origin value: nshost \\         - Origin value: pkiuser \\         - Origin value: rbta-address \\         - Origin value: rbta-unit \\         - Origin value: top \\   \\   \\ cn=repl keep alive <span style="color: #009900">4</span>,dc=ald250,dc=pro \\

                                                                        • 
                                                                           - Attribute 'keepalivetimestamp' is different:
                                                                                Supplier:
                                                                                  - Value:      20250806123737Z
                                                                                  - State Info: keepalivetimestamp;adcsn-68934c91000000040000;vucsn-68934c91000000040000: 20250806123737Z
                                                                                  - Date:       Wed Aug  6 15:37:37 2025
                                                                           
                                                                                Replica:
                                                                                  - Value:      20250805093737Z
                                                                                  - State Info: keepalivetimestamp;adcsn-6891d0e1000000040000;vucsn-6891d0e1000000040000: 20250805093737Z
                                                                                  - Date:       Tue Aug  5 12:37:37 2025
                                                                           
                                                                           
                                                                          dnaHostname=dc01.ald250.pro+dnaPortNum=389,cn=posix-ids,cn=dna,cn=ipa,cn=etc,dc=ald250,dc=pro
                                                                          
                                                                          • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • 
                                                                                                                                                                                           - Attribute 'dnaremainingvalues' is different:
                                                                                                                                                                                                Supplier:
                                                                                                                                                                                                  - Value:      100489
                                                                                                                                                                                                  - State Info: dnaRemainingValues;adcsn-6891e339000000040000;vucsn-6891e339000000040000: 100489
                                                                                                                                                                                                  - Date:       Tue Aug  5 13:55:53 2025
                                                                                                                                                                                           
                                                                                                                                                                                                Replica:
                                                                                                                                                                                                  - Value:      199992
                                                                                                                                                                                                  - State Info: dnaRemainingValues;adcsn-6891d7ae000100040000;vucsn-6891d7ae000100040000: 199992
                                                                                                                                                                                                  - Date:       Tue Aug  5 13:06:38 2025
                                                                                                                                                                                           
                                                                                                                                                                                           
                                                                                                                                                                                          uid=testuser,cn=users,cn=accounts,dc=ald250,dc=pro
                                                                                                                                                                                          
                                                                                                  • 
                                                                                                     - Attribute 'telephonenumber' is different:
                                                                                                          Supplier:
                                                                                                            - Value:      +111111111
                                                                                                            - State Info: telephoneNumber;adcsn-6891f9fa000000040000;vucsn-6891f9fa000000040000: +111111111
                                                                                                            - Date:       Tue Aug  5 15:32:58 2025
                                                                                                     
                                                                                                          Replica:
                                                                                                            - Value:      +33333333
                                                                                                            - State Info: telephoneNumber;adcsn-6891f9de000000030000;vucsn-6891f9de000000030000: +33333333
                                                                                                            - Date:       Tue Aug  5 15:32:30 2025
                                                                                                     
                                                                                                     
                                                                                                    uid=conflict_user,cn=users,cn=accounts,dc=ald250,dc=pro
                                                                                                    
                                                                                                    • • • • • 
                                                                                                               - Attribute 'ipantsecurityidentifier' is different:
                                                                                                                    Supplier:
                                                                                                                      - Value:      S-1521196329585322683535833897352581010
                                                                                                                      - State Info: ipaNTSecurityIdentifier;adcsn-6891e316000800040001;vucsn-6891e316000800040001: S-1521196329585322683535833897352581010
                                                                                                                      - Date:       Tue Aug  5 13:55:18 2025
                                                                                                               
                                                                                                                    Replica:
                                                                                                                      - Value:      S-152119632958532268353583389735258101500
                                                                                                                      - State Info: ipaNTSecurityIdentifier;adcsn-6891e339000c00030001;vucsn-6891e339000c00030001: S-152119632958532268353583389735258101500
                                                                                                                      - Date:       Tue Aug  5 13:55:53 2025
                                                                                                               
                                                                                                               - Attribute 'krbextradata' is different:
                                                                                                                    Supplier:
                                                                                                                      - Value:      
                                                                                                                      - State Info: krbExtraData;adcsn-6891e316000300040000;vucsn-6891e316000300040000:: AAIV45Focm9vdC9hZG1pbkBBTEQyNTAuUFJPAA==
                                                                                                                      - Date:       Tue Aug  5 13:55:18 2025
                                                                                                               
                                                                                                                    Replica:
                                                                                                                      - Value:      
                                                                                                                      - State Info: krbExtraData;adcsn-6891e339000500030000;vucsn-6891e339000500030000:: AAI445Focm9vdC9hZG1pbkBBTEQyNTAuUFJPAA==
                                                                                                                      - Date:       Tue Aug  5 13:55:53 2025
                                                                                                               
                                                                                                               - Attribute 'krblastpwdchange' is different:
                                                                                                                    Supplier:
                                                                                                                      - Value:      20250805105517Z
                                                                                                                      - State Info: krbLastPwdChange;vucsn-6891e316000200040001: 20250805105517Z
                                                                                                                      - Date:       Tue Aug  5 13:55:18 2025
                                                                                                               
                                                                                                                    Replica:
                                                                                                                      - Value:      20250805105552Z
                                                                                                                      - State Info: krbLastPwdChange;vucsn-6891e339000400030001: 20250805105552Z
                                                                                                                      - Date:       Tue Aug  5 13:55:53 2025
                                                                                                               
                                                                                                               - Attribute 'krbpasswordexpiration' is different:
                                                                                                                    Supplier:
                                                                                                                      - Value:      20250805105517Z
                                                                                                                      - State Info: krbPasswordExpiration;vucsn-6891e316000200040000: 20250805105517Z
                                                                                                                      - Date:       Tue Aug  5 13:55:18 2025
                                                                                                               
                                                                                                                    Replica:
                                                                                                                      - Value:      20250805105552Z
                                                                                                                      - State Info: krbPasswordExpiration;vucsn-6891e339000400030000: 20250805105552Z
                                                                                                                      - Date:       Tue Aug  5 13:55:53 2025
                                                                                                               
                                                                                                               - Attribute 'givenname' is different:
                                                                                                                    Supplier:
                                                                                                                      - Value:      conflict
                                                                                                                      - State Info: givenName;vucsn-6891e316000000040000: conflict
                                                                                                                      - Date:       Tue Aug  5 13:55:18 2025
                                                                                                               
                                                                                                                    Replica:
                                                                                                                      - Value:      conflicted
                                                                                                                      - State Info: givenName;vucsn-6891e339000100030000: conflicted
                                                                                                                      - Date:       Tue Aug  5 13:55:53 2025
                                                                                                               
                                                                                                               - Attribute 'cn' is different:
                                                                                                                    Supplier:
                                                                                                                      - Value:      conflict User
                                                                                                                      - State Info: cn;vucsn-6891e316000000040000: conflict User
                                                                                                                      - Date:       Tue Aug  5 13:55:18 2025
                                                                                                               
                                                                                                                    Replica:
                                                                                                                      - Value:      conflicted User
                                                                                                                      - State Info: cn;vucsn-6891e339000100030000: conflicted User
                                                                                                                      - Date:       Tue Aug  5 13:55:53 2025
                                                                                                               
                                                                                                               - Attribute 'displayname' is different:
                                                                                                                    Supplier:
                                                                                                                      - Value:      conflict User
                                                                                                                      - State Info: displayName;vucsn-6891e316000000040000: conflict User
                                                                                                                      - Date:       Tue Aug  5 13:55:18 2025
                                                                                                               
                                                                                                                    Replica:
                                                                                                                      - Value:      conflicted User
                                                                                                                      - State Info: displayName;vucsn-6891e339000100030000: conflicted User
                                                                                                                      - Date:       Tue Aug  5 13:55:53 2025
                                                                                                               
                                                                                                               - Attribute 'gecos' is different:
                                                                                                                    Supplier:
                                                                                                                      - Value:      conflict User
                                                                                                                      - State Info: gecos;vucsn-6891e316000000040000: conflict User
                                                                                                                      - Date:       Tue Aug  5 13:55:18 2025
                                                                                                               
                                                                                                                    Replica:
                                                                                                                      - Value:      conflicted User
                                                                                                                      - State Info: gecos;vucsn-6891e339000100030000: conflicted User
                                                                                                                      - Date:       Tue Aug  5 13:55:53 2025
                                                                                                               
                                                                                                               - Attribute 'userpassword' is different:
                                                                                                                    Supplier:
                                                                                                                      - Value:      {PBKDF2-SHA512}10000$+mn7IoPU4om7kLc9I3PS1opkiHJteGzy$uEHe5EuvMJ4c4KOukivH8+46Ohqvx8PuvSamj18k3uQnzgZ1KBl7brBq4yEGzxJc5Y6Ssl0hkxDZ2D0cMPCOLA==
                                                                                                                      - State Info: userPassword;vucsn-6891e316000000040000: {PBKDF2-SHA512}10000$+mn7IoPU4om7kLc9I3PS1opkiHJteGzy$uEHe5EuvMJ4c4KOukivH8+46Ohqvx8PuvSamj18k3uQnzgZ1KBl7brBq4yEGzxJc5Y6Ssl0hkxDZ2D0cMPCOLA==
                                                                                                                      - Date:       Tue Aug  5 13:55:18 2025
                                                                                                               
                                                                                                                    Replica:
                                                                                                                      - Value:      {PBKDF2-SHA512}10000$uPEJ8l/mnTsjJkckyxqqJRIQx/X2OrOI$Wzm9wddHKCb9JOLl4UVQLUk/czorLTUqEOYE6QBT/l4t+B+pXgJ8xXrVmkdnKYyREYmXrpf2XyNPsOoEbzbz8A==
                                                                                                                      - State Info: userPassword;vucsn-6891e339000100030000: {PBKDF2-SHA512}10000$uPEJ8l/mnTsjJkckyxqqJRIQx/X2OrOI$Wzm9wddHKCb9JOLl4UVQLUk/czorLTUqEOYE6QBT/l4t+B+pXgJ8xXrVmkdnKYyREYmXrpf2XyNPsOoEbzbz8A==
                                                                                                                      - Date:       Tue Aug  5 13:55:53 2025
                                                                                                               
                                                                                                               - Attribute 'ipauniqueid' is different:
                                                                                                                    Supplier:
                                                                                                                      - Value:      acbf75f2-71ea-11f0-8dec-02000a452902
                                                                                                                      - State Info: ipaUniqueID;vucsn-6891e316000000040000: acbf75f2-71ea-11f0-8dec-02000a452902
                                                                                                                      - Date:       Tue Aug  5 13:55:18 2025
                                                                                                               
                                                                                                                    Replica:
                                                                                                                      - Value:      c173c7be-71ea-11f0-a685-02000a452904
                                                                                                                      - State Info: ipaUniqueID;vucsn-6891e339000100030000: c173c7be-71ea-11f0-a685-02000a452904
                                                                                                                      - Date:       Tue Aug  5 13:55:53 2025
                                                                                                               
                                                                                                               - Attribute 'krbprincipalkey' is different:
                                                                                                                    Supplier: 
                                                                                                                      - Origin value: b'0\x81\xde\xa0\x03\x02\x01\x01\xa1\x03\x02\x01\x01\xa2\x03\x02\x01\x01\xa3\x03\x02\x01\x01\xa4\x81\xc70\x81\xc40h\xa0\x1b0\x19\xa0\x03\x02\x01\x04\xa1\x12\x04\x10eYQb_EFC-)X>eHD7\xa1I0G\xa0\x03\x02\x01\x12\xa1@\x04> \x00\xcd\xb1\xeaE5Atv\xf9\xc2`\xeb\x97\xbe\xd3;\xc5T\x01\x14b\xd2\xb1\xe6\'\xff|^\x85lL\x10/`\xb3Q\x8c\x95O\x87\xd1\xb4ox!.\xed\x0f8\xd7Wf")\xbba+\x1e/10X\xa0\x1b0\x19\xa0\x03\x02\x01\x04\xa1\x12\x04\x10MF{=:)VKQ|fEio>-\xa1907\xa0\x03\x02\x01\x11\xa10\x04.\x10\x00\xcd\xdd\x0f\x88e\x9c:\xdf\xab\xf5\xee+]"z\x838\xc8\x03\xc40\x0f\x8c3\xe4}\tn\x0et\x8b\x13\x86OR\xc7~\x95:\xd2\x0e"\x14\xa1'
                                                                                                               
                                                                                                                    Replica: 
                                                                                                                      - Origin value: b'0\x81\xde\xa0\x03\x02\x01\x01\xa1\x03\x02\x01\x01\xa2\x03\x02\x01\x01\xa3\x03\x02\x01\x01\xa4\x81\xc70\x81\xc40h\xa0\x1b0\x19\xa0\x03\x02\x01\x04\xa1\x12\x04\x10cB:8<=Y-PH|B4*+k\xa1I0G\xa0\x03\x02\x01\x12\xa1@\x04> \x00_\x1b\x16\x9f\xb4\x8c\xeb\x8b\x8c5uA\xcdK\x02\xa4\xddId\xe3\x9b!\xcf\xe1\xfa\xdb~\xfe\xf9F\xa9j\xdf\x14\xc7\x05\xd9\xe9\xf8\xbe\x03\xc9&\x8f\xea\xb4\xact\xfb\xcf:j\xb8W>GO\x02\xfe\x1b0X\xa0\x1b0\x19\xa0\x03\x02\x01\x04\xa1\x12\x04\x1050QY-;1sSPVip&U$\xa1907\xa0\x03\x02\x01\x11\xa10\x04.\x10\x00Y\xcd\xc4\xb7`2W&\xea\xbal0\x8a\xa0\x87\xa0\x8d\xd8\x85\x9b\xfd\xc4\xe4\xe8\x98\xff\xb0\xa4\x18\x19\x99\x14\xf0\xa9d${\x9e\x95Es\xd1\xb4\xa4'
                                                                                                               
                                                                                                               - Attribute 'uidnumber' is different:
                                                                                                                    Supplier: 
                                                                                                                      - Origin value: b'1213200010'
                                                                                                               
                                                                                                                    Replica: 
                                                                                                                      - Origin value: b'1213300500'
                                                                                                               
                                                                                                               - Attribute 'gidnumber' is different:
                                                                                                                    Supplier: 
                                                                                                                      - Origin value: b'1213200010'
                                                                                                               
                                                                                                                    Replica: 
                                                                                                                      - Origin value: b'1213300500'
                                                                                                               
                                                                                                               
                                                                                                              cn=conflict_user,cn=groups,cn=accounts,dc=ald250,dc=pro
                                                                                                              
                                                                                                            • 
                                                                                                               - Attribute 'gidnumber' is different:
                                                                                                                    Supplier:
                                                                                                                      - Value:      1213200010
                                                                                                                      - State Info: gidNumber;vucsn-6891e316000400040000: 1213200010
                                                                                                                      - Date:       Tue Aug  5 13:55:18 2025
                                                                                                               
                                                                                                                    Replica:
                                                                                                                      - Value:      1213300500
                                                                                                                      - State Info: gidNumber;vucsn-6891e339000600030000: 1213300500
                                                                                                                      - Date:       Tue Aug  5 13:55:53 2025
                                                                                                               
                                                                                                               - Attribute 'ipauniqueid' is different:
                                                                                                                    Supplier:
                                                                                                                      - Value:      accda578-71ea-11f0-8dec-02000a452902
                                                                                                                      - State Info: ipaUniqueID;vucsn-6891e316000400040000: accda578-71ea-11f0-8dec-02000a452902
                                                                                                                      - Date:       Tue Aug  5 13:55:18 2025
                                                                                                               
                                                                                                                    Replica:
                                                                                                                      - Value:      c1a7f6d8-71ea-11f0-a685-02000a452904
                                                                                                                      - State Info: ipaUniqueID;vucsn-6891e339000600030000: c1a7f6d8-71ea-11f0-a685-02000a452904
                                                                                                                      - Date:       Tue Aug  5 13:55:53 2025
                                                                                                               
                                                                                                               
                                                                                                               
                                                                                                              Result
                                                                                                              =====================================================
                                                                                                               
                                                                                                              There are replication differences between Supplier and Replica|