cl-dump man page

cl-dump — Dump and decode Directory Server replication change log


cl-dump [-h host] [-p port] [-D bind‐dn] -w bind‐password | -P bind‐cert
      [-r replica‐roots] [-o output‐file] [-c] [-v]

cl-dump -i changelog‐ldif‐file‐with‐base64encoding [-o output‐file] [-c]


Dump and decode Directory Server replication change log


A summary of options is included below.


Dump and interpret CSN only. This option can be used with or without -i option.

-D bind-dn

Directory server's bind DN. Default to "cn=Directory Manager" if the option is omitted.

-h host

Directory server's host. Default to the server where the script is running.

-i changelog‐ldif‐file‐with‐base64encoding

If you already have a ldif-like changelog, but the changes in that file are encoded, you may use this option to decode that ldif-like changelog.

-o output‐file

Path name for the final result. Default to STDOUT if omitted.

-p port

Directory server's port. Default to 389.

-P bind‐cert

Pathname of binding certificate DB

-r replica‐roots

Specify replica roots whose changelog you want to dump. The replica roots may be separated by comma. All the replica roots would be dumped if the option is omitted.


Print the version of this script.

-w bind‐password

Password for the bind DN


If you are not using -i option, the script should be run when the server is running, and from where the server's changelog directory is accessible.

See Also



cl-dump was written by the 389 Project.

Reporting Bugs

Report bugs to


May 18, 2008