Using the command line

idsldapmodify –D <bindDN> –w <password> –f <file>

where <file> contains:

dn: cn=Directory, cn=RDBM Backends, cn=IBM Directory, cn=Schemas, cn=Configuration
ibm-slapdTombstoneEnabled: TRUE

To reread the configuration file, issue the following command:

idsldapexop -D <bindDN> -w <password> -op readconfig -scope entire

To set the tombstone lifetime value, issue the following command-:

idsldapmodify –D <bindDN> –w <password> 

dn: cn=Directory, cn=RDBM Backends, cn=IBM Directory, cn=Schemas, cn=Configuration
ibm-slapdTombstoneLifeTime: <value to be set in hours>

To reread the configuration file, issue the following command-:

idsldapexop -D <bindDN> -w <password> -op readconfig -scope entire

You can use the –L parameter of the ldapdelete utility to delete entries under cn=Deleted Objects. To do this, you first display all tombstones under cn=Deleted Objects by issuing the following command:

idsldapsearch -b "cn=Deleted Objects"-r -D <bindDN> -w <password> objectclass=* dn

Next, you save the output in an ldif file and then use the ldif file as input to the ldapdelete command by issuing the following command:

idsldapdelete -c -L -f <file> -D <bindDN> -w <password>