Hi,
after adding a new eDirectory server on a tree I got synchronisation errors
  • ndsrepair -E -> -603 and -625
  • ndstrace -> -4999


I was able to fix this by setting
Code:
NCPCLIENT_REQ_TIMEOUT=300
export NCPCLIENT_REQ_TIMEOUT
in pre_ndsd_start (or pre_ndsd_start_custom).

It looks like the synchronisation of a single user took more time than the default NCPCLIENT_REQ_TIMEOUT value. Thus the NCP reply of the new server got the -4999 error. Looking at the user I noticed that the DirXML-EntitlementResult attribute has more than 11,000 entries. Is there a way to clear the attribute values? Or can I just delete the whole attribute and all of its values? I would like to clean up the user to prevent further synchronisation problems.

What is the attribute DirXML-EntitlementResult used for?

regards
Daniel