On Mon, May 04, 2026 at 08:56:37AM +0000, Sebastian Perkins wrote:
That’s what we are currently doing, especially in our ldapsearch based backup.
The goal of the thread is to understand what is going on.
Hi Sebastian, the issue as Howard already said is that these are dynamic attributes and not meant to be stored. slapcat-based backups (which you should prefer if possible, given that's the only way to guarantee a consistent view of the DB) will only return stored data. But `ldapsearch -MM` backups will also return these and should therefore be stripped, since slapadd stores what is given to it.
From 2.6.14 onward, slapadd will skip dynamic attributes when processing entries given to it (ITS#10501), however you should still prefer slapcat for your ldif-based backups and mdb_copy -c for file based backups in general.
Regards,