1. Copy the following lines into a file named fixLDIFFile and modify according to your environment. Make sure the ldapmodify command is ALL on a single line.

2. Make the file executable...

   # chmod +x fixLDIFFile

   ====================COPY EVERYTHING BELOW THIS LINE============================
   #!/bin/ksh
   #
   # fix ldifwrite file so it can be loaded into an existing OID database
   #
   print "Removing Offending Entries"
   egrep -v "orclguid|creatorsname|modifiersname|createtimestamp|modifytimestamp|pwdchangedtime" dumped.ldif > new.ldif
   print "Removing Offending Entries"
   ldapmodify -a -c -p 389 -h alex -D cn=orcladmin -w  -v -f ./new.ldif
   print "Retrieve the New Entries"
   ldapsearch -p 389 -h alex -b "" -v objectclass=*
   ====================COPY EVERYTHING UP TO THIS LINE============================

3. Run your command.

   NOTE: the script will retrieve the entries to verify that the command worked.

4. See Guide ct to see chapter on Password Policy in OID Admin Guide:

   In addition, the object class top contains these operational attributes, to maintain the user-password state information for each user entry.

   • pwdChangedtime: The timestamp of the user password creation or modification.
   • pwdExpirationWarned: The time at which the first password expiration warning is been sent to the user.
   • pwdFailuretime: The timestamp of consecutive failed login attempts by the user.
   • pwdAccountLockedTime: The time at which the user account was locked.
   • pwdReset: Requirement for the user to change the password, if this attribute is enabled.
   • pwdGraceUseTime: The time stamps of each grace login by the user.