hachi wrote:

This is the direct output from slapcat on my 2.3.38 openldap setup, I haven't changed it in any way (apart from cutting off later entries so that I'm not supplying you with a few thousand examples)

I trust you. But I believe that specific data was either generated by a much earlier version, or came from somewhere else. If you look at your original posting,> dn: dc=kuiki,dc=net

objectClass: dcObject objectClass: organization dc: kuiki o: kuiki.net structuralObjectClass: organization entryUUID: 03182abc-301a-1027-968b-e97431722845 creatorsName: cn=anonymous createTimestamp: 20030611053344Z entryCSN: 20060925002534Z#000000#00#000000 modifiersName: cn=admin,dc=kuiki,dc=net modifyTimestamp: 20060925002534Z contextCSN: 20071231014551Z#000000#00#000000

^^^ this is an "old" OpenLDAP format (no fractions of seconds, 2-digit SID); note the entryCSN was generated in 2006 and the contextCSN in 2007

dn: ou=People,dc=kuiki,dc=net objectClass: organizationalUnit ou: People structuralObjectClass: organizationalUnit entryUUID: 031994e2-301a-1027-968d-e97431722845 creatorsName: cn=anonymous modifiersName: cn=anonymous createTimestamp: 20030611053344Z modifyTimestamp: 20030611053344Z entryCSN: 2003061105:33:44Z#0x0003#0#0000

^^^ this is nonsense to me; note it was generated in 2003, and 2.3.38 did not exist at that time (but, apparently, it allows bulk loading of this CSN form).

p.

Ing. Pierangelo Masarati OpenLDAP Core Team

SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it --------------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Email: pierangelo.masarati@sys-net.it ---------------------------------------