Ulrich Windl wrote:
What about comparing the EntryCSN of the top-level object?
No! You should read what entryCSN attribute really is!
You have to compare the contextCSN values in the database's root entry.
In case you're using slapo-memberof or slapo-refint you want to have release 2.4.37+ with a fix for ITS#7710. Otherwise your admins will hate you for being called at night for nothing.
You could also slapcat each node, sort the lines and compare the results
Likely you don't want to do this for a directory with more than a few dozens entries in a monitor check invoked every minute. ;-]
Ciao, Michael.