I have inherited two LDAP servers that seem to contain the same information. My goal is to determine if that is the case or not. I am able to use slapcat to output an ldif of both servers however I am unable to use diff to compare these files directly because the items are slapcat'd in a different order.
Can these files be reordered so a comparison is possible?
I am unable to use ldapsearch for this because the server limits searches to 500 records and I have over 30,000 records.
OpenDJ has a tool to compare 2 LDIF files: ldif-diff. It's slow and requires some memory but we've tested it with files containing hundreds of thousands of entries.