Pierangelo Masarati wrote:

hyc@OpenLDAP.org wrote:

...

Another possibility would be to filter out any entries whose entryCSNs are newer than the contextCSN in the LDIF before trying to slapadd it.

Should slapadd take care of it (perhaps if instructed to do so)?

Of course it might be better to change the delta-sync consumer to check the target's entryCSN after a modification fails, to see if it matches the current modification attempt. If so, then the failure can be safely ignored.