Hello Ondřej
Thanks, we will go ahead on that road, the answer and consistency of the 2 dynamic attributes throughout openldap 2.4 / 2.6 in Debian 11, 12 and 13 is fine for us.
Just a last question before totally moving on...
~From 2.6.14 onward, slapadd will skip dynamic attributes when processing entries given to it (ITS#10501), however you should still prefer slapcat for your ldif-based backups and mdb_copy -c for file based backups in general.
We also use the password policy which exports / imports fine, these are extended attributes but not dynamic ones and hence will be fine ?
Best regards Sebastian
Sebastian Perkins Senior Systems Development Engineer weareplanet.com De : Ondřej Kuzník ondra@mistotebe.net Date : lundi, 18 mai 2026 à 11:20 À : Sebastian Perkins Sebastian.Perkins@hoistgroup.com Cc : Erik de Waard erikdewaard@gmail.com; openldap-technical openldap-technical@openldap.org Objet : Re: Ldapsearch : double on certain extended attributes
CAUTION: This email originated from outside Planet. Do not click links or open attachments unless you recognise the sender and know the content is safe. Please report all suspicious emails by clicking on the report message button in Outlook.
On Mon, May 04, 2026 at 08:56:37AM +0000, Sebastian Perkins wrote:
That’s what we are currently doing, especially in our ldapsearch based backup.
The goal of the thread is to understand what is going on.
Hi Sebastian, the issue as Howard already said is that these are dynamic attributes and not meant to be stored. slapcat-based backups (which you should prefer if possible, given that's the only way to guarantee a consistent view of the DB) will only return stored data. But `ldapsearch -MM` backups will also return these and should therefore be stripped, since slapadd stores what is given to it.
From 2.6.14 onward, slapadd will skip dynamic attributes when processing entries given to it (ITS#10501), however you should still prefer slapcat for your ldif-based backups and mdb_copy -c for file based backups in general.
Regards,
-- Ondřej Kuzník Senior Software Engineer Symas Corporation http://www.symas.com/http://www.symas.com/ Packaged, certified, and supported LDAP solutions powered by OpenLDAP
