• Use ldap-diff to compare the configuration entries in two Directory Server instances. The filter searches all configuration entries. Ignore the userpassword attribute due to the password storage scheme that uses a one-way hashing algorithm. 
    $ bin/ldap-diff --outputLDIF difference.ldif \ 
  --sourceHost server1.example.com --sourcePort 1389 \ 
  --sourceBindDN "cn=Directory Manager" --sourceBindPassword secret1 \ 
  --targetHost server2.example.com --targetPort 2389 \ 
  --targetBindDN "cn=Directory Manager" --targetBindPassword secret2 \ 
  --baseDN cn=config --searchFilter "(objectclass=*)" "^userpassword"