Multiwrite Ignore Attributes

The purpose of multiwrite ignore attributes is to prevent replication from being rejected in either direction.
Some possible causes of rejects are:
  • Proprietary attributes: Attributes that are maintained alongside entries for a product-specific purpose
  • Operational attributes: Attributes that are maintained by the directory rather than the user and are often marked as no-user-modification
  • Attributes not define in the schema: For example, if during migration a new attribute is included with entries that is not supported by the migration target. This circumstance is rare.
Attributes that cause replication updates to fail can be ignored.
When configuring DXlink pull or push replication for the first time, monitor replication to ensure that updates are not being refused on either side. The warning log is a good place to start investigating such issues.
The following are some attributes that are known to cause issues when replicating to another vendor’s directory servers, and typically must be ignored:
  • dxPwdGraceLogins
  • dxPwdGraceUseTime
  • dxPwdMustChange
  • dxPwdHistory
  • dxPwdFailedAttempts
  • dxPwdFailedTime
  • dxPwdLoginTime