DIRADMIN account not working anymore

Question

I have seen many other posts related to this issue, and I have tried all the suggestions I have seen. I can't log into Workgroup Manager as diradmin and can't re-kerberize my domain as it doesn't take the diradmin account and password in slapconfig.
I am at a point now where I may have to demote and re-promote my OD Master, but what will that do to the 7 replicas I have each with Home directory mounts????

Answer 1

Hi
You could try the root account?
After the server software has installed you are prompted to create the default admin account. At that stage root is enabled and is synchronised with that account. This only happens with the Server OS. The name of course is different but the password is the same. If at some future stage you decide to change either the admin or root passwords they are not synchronised.
The same process works for Open Directory. When OD Promotion takes place you are prompted to create the default directory admin account:- diradmin. At that stage the root account is copied over to the LDAP directory as well. It takes the same password as is set for the diradmin account. Again passwords are not synchronised.
You can verify this by monitoring the slapconfig.log. Console > /Library/Logs > slapconfig.log. Slapconfig is the process that drives OD Master creation. You'll see the other processes slapconfig brings along for the ride; kerberosautoconfig, sso_util, kdcsetup and mkpassdb. Two entries you should see are:
2005-07-21 11:55:14 +0100 - command: /usr/sbin/mkpassdb -a -u diradmin -p -q
2005-07-22 11:55:14 +0100 - command: /usr/sbin/mkpassdb -a -u root -p -q
Its at this stage the root account has been created along with the diradmin one.
Have you tried this method yet?
HTH, Tony