Integrity checking tools

[Dave Horsfall <daveh@ci.com.au>]

Are there any tools to check the integrity of a directory?  I'm running
OpenLDAP 2.0.25, if it makes a difference.

After playing with a nifty tool "ldapsync" that synchronises slaves from
their master, it croaks on what turned out to be bad data in the master.

Two examples:

1) Entries with missing "MUST" attributes; $DEITY knows how that could
   have happened (schema checking turned off or schema changed after
   the fact?).

2) Entries where the RDN is not part of the DN.  For example:

  employeeNumber=M0000,ou=Bleak City,ou=vic,dc=au,dc=example,dc=com
  employeeNumber: 40000

I.e. a simple typo, in this case.

-- 
Dave Horsfall  DTM  VK2KFU  daveh@ci.com.au  Ph: +61 2 9906-7866  Fx: 9906-1556
Corinthian Engineering, Level 1, 401 Pacific Hwy, Artarmon, NSW 2064, Australia