Hi,
in your first message, the output of
$ dsconf -D "cn=Directory Manager" ldap://$(hostname) repl-conflict list-glue "dc=noc,dc=net"
mentions:
dn: cn=
sg1-replica.noc.net,cn=masters,cn=ipa,cn=etc,dc=noc,dc=net
nsds5replconflict: deletedEntryHasChildren
It means that the replication tried to delete this entry on 1 server but there were subentries below that one.
Is this replica sg1-replica.noc.net still present in the topology? If it has been removed, you can delete the entry and its children. Otherwise you need to keep it.
The other conflict is dn: krbprincipalname=HTTP/
mi1-replica.noc.net@NOC.NET+nsuniqueid=0264df8b-fca611ee-a3cba8b9-8a6b8039,cn=services,cn=accounts,dc=noc,dc=net
Can you show the content of the entry and the content of the conflict entry? The differences may help understand why there is a conflict.
ldapsearch -D "cn=directory manager" -W -b krbprincipalname=HTTP/
mi1-replica.noc.net@NOC.NET+nsuniqueid=0264df8b-fca611ee-a3cba8b9-8a6b8039,cn=services,cn=accounts,dc=noc,dc=net
flo