Jason,
Yes, bad search filter there - apologies.
This one is better:
# ldapsearch -xLLL -D "cn=Directory Manager" -W -b
ou=certificateprofiles,ou=ca,o=ipaca
'(&(nsds5ReplConflict=*)(objectclass=ldapsubentry))'
The base DN you want to specify is 'ou=certificateprofiles,ou=ca,o=ipaca'. This
is
the area from which the profile monitor thread obtains data.
I totally missed your reply, sorry.
Here's the output of that ldapsearch, I do not see nsds5ReplConflict in the output.
Does this output mean all of these are conflicts?
dn: cn=caCMCECserverCert+nsuniqueid=191ae601-03e811e9-a000b184-ffa545f3,ou=cer
tificateProfiles,ou=ca,o=ipaca
certProfileConfig:: YXV0..c2UK
objectClass: top
objectClass: certProfile
objectClass: ldapsubentry
cn: caCMCECserverCert
classId: caEnrollImpl
dn: cn=caCMCECsubsystemCert+nsuniqueid=191ae602-03e811e9-a000b184-ffa545f3,ou=
certificateProfiles,ou=ca,o=ipaca
certProfileConfig:: YXV0..Cg==
objectClass: top
objectClass: certProfile
objectClass: ldapsubentry
cn: caCMCECsubsystemCert
classId: caEnrollImpl
dn: cn=ECAdminCert+nsuniqueid=191ae603-03e811e9-a000b184-ffa545f3,ou=certifica
teProfiles,ou=ca,o=ipaca
certProfileConfig:: YXV0..dWUK
objectClass: top
objectClass: certProfile
objectClass: ldapsubentry
cn: ECAdminCert
classId: caEnrollImpl
dn: cn=caECServerCert+nsuniqueid=191ae604-03e811e9-a000b184-ffa545f3,ou=certif
icateProfiles,ou=ca,o=ipaca
certProfileConfig:: YXV0..dWUK
objectClass: top
objectClass: certProfile
objectClass: ldapsubentry
cn: caECServerCert
classId: caEnrollImpl
dn: cn=caECSubsystemCert+nsuniqueid=191ae605-03e811e9-a000b184-ffa545f3,ou=cer
tificateProfiles,ou=ca,o=ipaca
certProfileConfig:: YXV0..ZQo=
objectClass: top
objectClass: certProfile
objectClass: ldapsubentry
cn: caECSubsystemCert
classId: caEnrollImpl
dn: cn=caECDirPinUserCert+nsuniqueid=191ae606-03e811e9-a000b184-ffa545f3,ou=ce
rtificateProfiles,ou=ca,o=ipaca
certProfileConfig:: YXV0..dWUK
objectClass: top
objectClass: certProfile
objectClass: ldapsubentry
cn: caECDirPinUserCert
classId: caEnrollImpl
dn: cn=caECAgentServerCert+nsuniqueid=191ae607-03e811e9-a000b184-ffa545f3,ou=c
ertificateProfiles,ou=ca,o=ipaca
certProfileConfig:: YXV0..dWUK
objectClass: top
objectClass: certProfile
objectClass: ldapsubentry
cn: caECAgentServerCert
classId: caEnrollImpl
dn: cn=caCMCECUserCert+nsuniqueid=191ae608-03e811e9-a000b184-ffa545f3,ou=certi
ficateProfiles,ou=ca,o=ipaca
certProfileConfig:: YXV0..ZQo=
objectClass: top
objectClass: certProfile
objectClass: ldapsubentry
cn: caCMCECUserCert
classId: caEnrollImpl
dn: cn=caECFullCMCUserCert+nsuniqueid=191ae609-03e811e9-a000b184-ffa545f3,ou=c
ertificateProfiles,ou=ca,o=ipaca
certProfileConfig:: YXV0..Cg==
objectClass: top
objectClass: certProfile
objectClass: ldapsubentry
cn: caECFullCMCUserCert
classId: caEnrollImpl
dn: cn=caECFullCMCUserSignedCert+nsuniqueid=191ae60a-03e811e9-a000b184-ffa545f
3,ou=certificateProfiles,ou=ca,o=ipaca
certProfileConfig:: YXV0..c2UK
objectClass: top
objectClass: certProfile
objectClass: ldapsubentry
cn: caECFullCMCUserSignedCert
classId: caEnrollImpl
dn: cn=caECFullCMCSelfSignedCert+nsuniqueid=191ae60b-03e811e9-a000b184-ffa545f
3,ou=certificateProfiles,ou=ca,o=ipaca
certProfileConfig:: YXV0..c2UK
objectClass: top
objectClass: certProfile
objectClass: ldapsubentry
cn: caECFullCMCSelfSignedCert
classId: caEnrollImpl
dn: cn=caECSimpleCMCUserCert+nsuniqueid=191ae60c-03e811e9-a000b184-ffa545f3,ou
=certificateProfiles,ou=ca,o=ipaca
certProfileConfig:: YXV0..c2UK
objectClass: top
objectClass: certProfile
objectClass: ldapsubentry
cn: caECSimpleCMCUserCert
classId: caEnrollImpl
dn: cn=caECAdminCert+nsuniqueid=191ae60d-03e811e9-a000b184-ffa545f3,ou=certifi
cateProfiles,ou=ca,o=ipaca
certProfileConfig:: YXV0..ZQo=
objectClass: top
objectClass: certProfile
objectClass: ldapsubentry
cn: caECAdminCert
classId: caEnrollImpl
dn: cn=caECInternalAuthServerCert+nsuniqueid=191ae60e-03e811e9-a000b184-ffa545
f3,ou=certificateProfiles,ou=ca,o=ipaca
certProfileConfig:: YXV0..Cg==
objectClass: top
objectClass: certProfile
objectClass: ldapsubentry
cn: caECInternalAuthServerCert
classId: caEnrollImpl
dn: cn=caECInternalAuthSubsystemCert+nsuniqueid=191ae60f-03e811e9-a000b184-ffa
545f3,ou=certificateProfiles,ou=ca,o=ipaca
certProfileConfig:: YXV0..Cg==
objectClass: top
objectClass: certProfile
objectClass: ldapsubentry
cn: caECInternalAuthSubsystemCert
classId: caEnrollImpl