We've managed to get our certificates out of whack between some of the LDAP directories. We have a tool that updates the certs from Verisign (these are user certificates I'm talking about) but on the LDAP driver, what ends up happening is the toll does a LDAP replace and the driver issues a remove-value add-value. The removed value is not found in the destination (because we are doing things like allowing mods in two places, I know.....) and the event fails as a result.

How can I convert remove-value \ add-value to set-value?
Strip it, then do a set from source-attr?

With octect values, are they as simple as changing that drop down to "octet" in a rule and then treat it like any other string atttr?

Basic silly questions I know. Thanks!