[Freeipa-users] LDAP conflicts and ldapsubentry

Dear list, I noted from TFM <https://access.redhat.com/documentation/en-us/red_hat_directory_server/10... that conflicting values have ldapSubEntry and nsds5ReplConflict attributes, however it only mentioned removing the latter. Should we in fact remove ldapsubentry as well when resolving these conflicts? For the two conflicts I had, I noted: 1. cn: ipservices was identical apart from the aforementioned attributes. *laregly resolved but ldapsubentry still in place taking the newer version over old 2. I had a subtly different "cn: System: Read POSIX details of SMB services". Conflicting entries (ipaPermDefaultAttr: uid vs ipaPermDefaultAttr: uidnumber) which I assume to be a schema change during upgrade that borked somehow? * I haven't actioned this one yet given the discrepancy. Recently upgraded packages in centos which took us from 4.7.6 (IIRC) to 4.8.4. Thanks as ever, David