Misconfiguration detected in hash 'Global UID'

Question

Very dears all,
I upgraded to Snow Leopard Server but I am still missing to have everything working safely as it was on Leopard Server.
In SL Server, Open Directory is Master and its overview page says that both LDAP Server, Password Server and Kerberos are running but in the Settings pane the Kerberize... button is always present (while it is absent in L Server) and if I push the button I am requested to enter user name and password, which is the same I enter in WGM (where it works OK), but it is not accepted and the same windows is re-opened.
Checking the OP logs, in Directory Services Error log, I got the following raw:
Misconfiguration detected in hash 'Global UID'
As well as User root raws for /LDAPv3/127.0.0.1 and Local are present with complex string references for UUID and SID.
Is there anyone may help me to understand what it means and what to do to fully recover the service?
Many thanks and best wishes,
Carmine

Answer 1

I look in my Directory Services Error log and see
2009-11-11 13:28:27 EST - T[0x0000000100783000] - Misconfiguration detected in hash 'Global UID':
2009-11-11 13:28:27 EST - T[0x0000000100783000] - User 'root' (/LDAPv3/127.0.0.1) - ID 0 - UUID 50518200-F0D2-4497-A282-6BBE836687C9 - SID S-1-5-21-68834345-3193862298-1725808020-1000
2009-11-11 13:28:27 EST - T[0x0000000100783000] - User 'root' (/Local/Default) - ID 0 - UUID FFFFEEEE-DDDD-CCCC-BBBB-AAAA00000000 - SID S-1-5-18
I launch dscl and
list LDAPv3/127.0.0.1/Users/
diradmin
root
vpn_30717237d42a
root user in open directory that is new in SL.
list Local/Default/Users/
_amavisd
_appowner
_appserver
_ard
_atsserver
_calendar
_carddav
_clamav
_coreaudiod
_cvmsroot
_cvs
_cyrus
_devdocs
_dovecot
_eppc
_installer
_jabber
_lda
_locationd
_lp
_mailman
_mcxalr
_mdnsresponder
_mysql
_pcastagent
_pcastserver
_postfix
_qtss
_sandbox
_screensaver
_securityagent
_serialnumberd
_softwareupdate
_spotlight
_sshd
_svn
_teamsserver
_timezone
_tokend
_trustevaluationagent
_unknown
updatesharing
_usbmuxd
_uucp
_windowserver
_www
_xgridagent
_xgridcontroller
com.apple.calendarserver
com.apple.mailuserforservices
com.apple.notificationuser
daemon
nobody
notjunkmail
root
Which also has a root user. So yes I have 2 root users. I have never seen a root user in the ldap database is this new and expected?
Is this wrong?
should I line up the generated UIDS?
read LDAPv3/127.0.0.1/Users/root/
dsAttrTypeNative:altSecurityIdentities: Kerberos:[email protected]
dsAttrTypeNative:apple-generateduid: 50518200-F0D2-4497-A282-6BBE836687C9
dsAttrTypeNative:authAuthority:
;ApplePasswordServer; blah blah blah blah blah
[email protected]:192.168.1.1
dsAttrTypeNative:cn:
System Administrator
dsAttrTypeNative:gidNumber: 0
dsAttrTypeNative:homeDirectory: /private/var/root
dsAttrTypeNative:loginShell: /bin/tcsh
dsAttrTypeNative:objectClass: inetOrgPerson posixAccount shadowAccount apple-user extensibleObject
dsAttrTypeNative:shadowExpire: 0
dsAttrTypeNative:shadowLastChange: 0
dsAttrTypeNative:sn: Administrator
dsAttrTypeNative:uid: root
dsAttrTypeNative:uidNumber: 0
dsAttrTypeNative:userPassword: ******
AltSecurityIdentities: Kerberos:[email protected]
AppleMetaNodeLocation: /LDAPv3/127.0.0.1
AuthenticationAuthority:
Change: 0
Expire: 0
GeneratedUID: 50518200-blah-blah-blah-blah
LastName: Administrator
NFSHomeDirectory: /private/var/root
Password: ******
PrimaryGroupID: 0
RealName:
System Administrator
RecordName:
root
System Administrator
RecordType: dsRecTypeStandard:Users
UniqueID: 0
UserShell: /bin/tcsh
read Local/Default/Users/root
AppleMetaNodeLocation: /Local/Default
AuthenticationAuthority: ;ShadowHash; ;Kerberosv5;;root@LKDC:SHA1.3 blah;
GeneratedUID: blah blah-blah-blah-blah-blah blah blah
NFSHomeDirectory: /var/root
Password: ******
PrimaryGroupID: 0
RealName:
System Administrator
RecordName: root
RecordType: dsRecTypeStandard:Users
SMBSID: S-1-5-18
UniqueID: 0
UserShell: /bin/sh
What to do...