Open directory restore

I have a file here I found after a server was upgraded and I am picking up the pieces.
It's running Lion, and before it was running Snow Leopard. I was unable to restore the OD because this file isn't a sparsebundle backup of the users, rather, it seems to be a simple list of the users...?
It's got all the properties there, but it's just not .. a sparsebundle..
On top of that the former admin moved most of the users' folders so I am having to move them back and fix Open directory after he quit.
I have all the user folders apparently, but I will need to get OD restored properly.
Thanks

Make sure you are clicking on the second file picker button by the "restore from" box. If you choose the archive box on top, you wont be able to pick the file. Also, make sure the archive file on the server ends with ".sparseimage" suffix. It should have been appended automatically when the archive was saved.
As a workaround, you can use the command line. Open Terminal, and run, "sudo slapconfig -mergedb <path-to-archive>" which is the same command the GUI uses.

Similar Messages

How to do an Open Directory Restore in Lion Server?

Lion Server on a Mac Mini was having issues when being rebooted. We've pulled the plug a few times in the past to bring it back up, An update was done last night to 10.7.5, then it hung on restart. Once it was hard reset, it hung on start, went into Safe Mode and everything came up, rebooted normally and Open Direcorty services won't start and all users are missing.
Never did a manual archive of OD with Server Admin, but have Time Machine backups going back a few weeks.
Is there anyway to just restore Open Directory? Can I use Server Admin to point to a TM backup and pull a file there? If so, what type of file am I looking for?

Hi,
actually this functionality does not work. The reason for this is that Forms9i is Web only and there is no functionality downloaded with the generic Java Applet. For the moment I filed an enhancement request to have this on our radar. Meanwhile, if you need thi sfunctionality you can help yourself by writing a PJC that opens a dialog and performs the action that you want to.
Frank
Forms Product Management

Open directory restore from archive

I am using Snow Leopard Server.
I had to re-install server, before I did that I made an archive of my directory. After install I restored my directory.....everything good in workgroup manager, but when I go into Server Admin and open users or groups it just hangs "looking for users/groups", also it doesn't allow me to add user/groups either. The same thing happens, it just hangs. Any ideas?
Thanks!

I meant to say Server Preferences, not Server Admin...sorry!

Open directory 'read only' after restore

Hi
I have restored open directory using sudo slapconfig -restoredb after our server hangs on a restart and subsequently loses the master record, users etc.
All appears OK except that I am unable to add or remove users via the Server.app. It appears as though the restore process has given the OD read only permissions?
Any ideas
Thanks
Andrew

Please update Mountain Lion and OS X Server to the latest versions (App Store) and use Workgroup Manager 10.8 to manage your users.

Open directory crashed after a Time Machine restore

Hi,
My name is Benoît and I own a PowerMac G5 on which Mac OSX 10.5.6 Leopard server is running since 1,5 years. Last friday, the main hard drive crashed and I had to restore the whole disk using Time Machine (the last complet backup was 3 days old).
After the restore, all the services were up and running except the Open Directory which says LDAP server, password server and Kerberos server are down. The error log file says:
2008-06-19 17:08:19 CEST - T[0xF0103000] - Attempt #1 to initialize plug-in PasswordServer failed.
Will retry initialization at most 100 times every 1 second.
2008-07-02 15:41:06 CEST - T[0xA0B95074] - Improper shutdown detected
2008-07-02 15:48:25 CEST - T[0xA0B95074] - Improper shutdown detected
2008-07-02 15:56:42 CEST - T[0xA0B95074] - Improper shutdown detected
2008-07-02 16:47:36 CEST - T[0xA0B95074] - Improper shutdown detected
2008-07-24 09:44:56 CEST - T[0xA0B95074] - Improper shutdown detected
2008-09-30 16:51:48 CEST - T[0xA0AF9074] - Improper shutdown detected
2008-12-26 17:32:11 CET - T[0xA03E3074] - Improper shutdown detected
2009-02-27 15:57:33 CET - T[0xA01AE830] - Improper shutdown detected
2009-03-28 13:11:20 CET - T[0xA01AE830] - Improper shutdown detected
2009-03-28 14:00:16 CET - T[0xF0103000] - dsDoReleaseContinueData - PID 0 error -14071 while checking if reference <16787390> is a node
2009-04-19 17:03:40 CEST - T[0x00A16830] - Improper shutdown detected
2009-04-19 17:12:19 CEST - T[0xA01F3830] - Improper shutdown detected
2009-04-19 17:18:34 CEST - T[0xA01F3830] - Improper shutdown detected
I tried to repair the authorisations on the disk and start again the computer with no effect. Oh, for the record, the PowerMac G5 acts as a standalone Open Directory server.
I don't know what to do so if someone can help me, that would be great!
Thanks a lot,
Ben.

How did you do the "restore?" Did you restore the library from the pictures folder?
Barry

10.7.2: still can't replicate 10.6 Open Directory or restore from backup

I am trying to migrate my Open Directory (OD) database from an Xserve running 10.6.8 to an iMac running 10.7.2 now. As before the update to 10.7.2, I am unable to make the Lion server an OD replica of the OD database running on Snow Leopard.
This is what I do (please let me know, if anyting I do is wrong):
On the Snow Leopard Server (SLS) in the Server Admin utility, I go to the Open Directory service, the "Archive" subsection, choose a target directory for "Archive In", and click on the Archive button. I am then asked to name my archived database and provide a password. Let's say, it is "OD Archive," the file generated will be "OD Archive.sparseimage".
I copy this Sparseimage to the deskop of my Leopard Server (LS).
I then open the same place in the Server Admin utility on the LS. In the "Restore from" section I browse to the LS desktop and "Choose" the saved Sparseimage. I click on "Restore," at which point I am asked for the password of the archived OD database. When I supply it, it appears that my OD archive is being imported.
However, going into the Workgroup Manager on the LS, and logging in as diradmin, into /LDAPv3/127.0.0.1, shows no users from my SLS having been migrated. Why has this still not been fixed?
Likewise, when I try to make the LS an Open Directory replica of the SLS, I again, even after this updated informed that my OD database admin credentials are incorrect, when they are not. I had surely expeced a fix for this by the time we reached 10.7.2.

Historically you have not been able to mix versions between an Open Directory Master and Replica, that is both would either have to be Snow Leopard, or both would have to be Lion.
I have not tried upgrading to Lion this way (I am currently leaving my servers on Snow Leopard) but I can suggest the following based on experiences with Snow Leopard Servers.
As you already appear to have done, in Snow Leopard Server make an Archive of your Open Directory setup
Make sure you also have a backup of the entire Snow Leopard Server so you can go back to it if you can't successfully move to Lion
Setup the hostname, IP address and DNS records (which might mean setting up a DNS server) for the new Lion Server
Check this using the command line
sudo changeip -checkhostname
Make the new Lion Server in to a new empty Open Directory Master
Test this new Open Directory Master by creating a test user and then deleting afterwards
Now move on to the restoring of the Open Directory Archive, when I did this last time, I found that I was given two choices, either to completely replace the Open Directory with the one from the Archive, or to merge the two together. I found that trying to replace failed and resulted in an empty Open Directory like you report, I found that chosing merge did work successfully
If the above still does not work, then you might have to consider the following alternative approach.
On the Snow Leopard Server in Workgroup Manager export all the user accounts except the Admin and DirAdmin accounts
Optionally export all the Groups
Optionally export all the Computer Groups
Setup the new Lion Server
Create a new empty Open Directory
Import the files exported from Workgroup Manager
This will not keep the original passwords. You will have to set a password for each account.

Open Directory Migration Question

Setup:
My company has two servers, both running 10.5.6. We are migrating from the server Fubar (xserve) as it has had a lot of problems and we want to do a fresh install on it (I was not the admin who initially set it up).
In order to get a 'fresh' OD going, we are recreating all the accounts on the new server Edoras (powerpc mac pro), making sure to preserve UID of the users.
Problem:
User A cannot change his password on Edoras after Directory Utility has been changed to point at it. He can change his password locally, but it does not propagate to Edoras, nor does a password change on Edoras affect his local machine.
The questions I haven't been able to get answers for are:
* Should the OD search string be different on Fubar and Edoras? Currently our search string is 'dc=fubar,dc=domain,dc=com'.
* Are there other attributes that have to be setup in OD besides UID? I noticed when using the Target tab in Workgroup Manager that there is a GeneratedUID attribute, does this need to match?
Thanks for any information/help.

I did something like this recently. Unfortunately I couldn't get an answer on the Internet and had to re-configure Directory Access on the client machines manually.
I moved our system from a POwerMac G4 with several upgrades (eSATA card, eSATA Coolgear Enclosure, 7200.11 (yeah I know, bad drives to use) Seagate drives, 1.8 GHz PPC 7447 upgrade, 1.5GB of ram) to a new Mac Pro with a Highpoint RAID controller. The old G4 was very unreliable and couldn't hand
I had to go to each machine with ARD, open Directory Access, delete the LDAP entry and re-enter it. This was really annoying and confusing for me as the old server and the new server had:
The same version of OSX (ok, one was a PPC version and I special ordered the Intel version from Apple Tech Support), but they both were running 10.4.11 with the newest security patches.
The same OD Search Strings
The same IP Address for the Server
The same DNS name for the server
and the same user IDs and group settings
and I still had to re-do Directory Access using the client machines. Before re-doing the Directory Access re-binding I would try to login. The "other" icon would appear on the loging window, but when I would loging with the correct username and password the login windows would "shake it's head" and wouldn't let me login.
The biggest pain was that portable directories didn't sync correct anymore, so I had to manually backup, then delete the account, then re-bind, then re-create and restore the portable directory on each laptop manually.
Unfortunately I do not know the unix command to change directory binding to client computers using ARD. If such a command exists it would make things much easier for you. Does anyone know if a command exists?

Open directory unable to start up after crash

Hi everyone,
Our OS X Server 10.8.4 crashed. After booting up again open directory doesn't want to start up so LDAP isn't running which means nobody can access their mails or do anything.
When trying to start the Open Directory service in the "Server" app it just says "Unable to load replica list"
Looking at the Open Directory Log after trying to switch it on this is what I get :
2013-06-28 15:22:53.830872 SAST - 43.7184, Module: AppleODClientLDAP - unable to create LDAP connection context - no server specified
2013-06-28 15:22:53.830888 SAST - 43.7184 - Client: opendirectoryd, UID: 0, EUID: 0, GID: 0, EGID: 0
2013-06-28 15:22:53.830888 SAST - 43.7184, Module: AppleODClientLDAP - unable to open connection to LDAP server - unable to create connection context
2013-06-28 15:23:23.832473 SAST - 43.7189 - Client: opendirectoryd, UID: 0, EUID: 0, GID: 0, EGID: 0
2013-06-28 15:23:23.832473 SAST - 43.7189, Module: AppleODClientLDAP - unable to create LDAP connection context - no server specified
2013-06-28 15:23:23.832488 SAST - 43.7189 - Client: opendirectoryd, UID: 0, EUID: 0, GID: 0, EGID: 0
2013-06-28 15:23:23.832488 SAST - 43.7189, Module: AppleODClientLDAP - unable to open connection to LDAP server - unable to create connection context
Does anyone have any advice on how to get it up and running again? I'd hate to lose all my users emails and do the server over. I have a time machine backup of a week ago as well which I guess is the second-to-last resort to restore the entire server from there?
Please help, I'm desperate here
Thanks
J

I was able to restore the existing server with the automatic OD backup that Server.app creates. When my OD fails to start after a crash and db_recover commands don't work, it's always worked for me to restore the odmaster from a backup using the command:
sudo slapconfig -restoredb /private/var/backups/ServerBackup_OpenDirectoryMaster.sparseimage
I'm careful to keep an independent OD backup with Carbon Copy Cloner and this preflight script.
You can also grab an earlier version of the sparse image ServerBackup_OpenDirectoryMaster.sparseimage from a Time Machine backup. It's also possible to rsync the database files directory from a Time Machine backup.

After Updating to Server 4.1 Open directory and LPAD gone

Hello,
two days ago I discovered that Open directory was not working on our Server (Mac Mini 2012). I suspect it stopped working after updating to 10.10.3 and OS-X Server 4.1. When I try to start Open directory in the Server App the Server App prompts: Unable to load Replica List. When I try to recreate my Open directory Server I Get: OD Server already exists.
I get the following log entries:
LDAP Log
Apr 11 22:03:02 server.seju.eu slapd[925]: @(#) $OpenLDAP: slapd 2.4.28 (Feb 24 2015 21:45:59) $
[email protected]:/BinaryCache/OpenLDAP/OpenLDAP-499.32.4~1/Objects/servers/slapd
Apr 11 22:03:02 server.seju.eu slapd[925]: daemon: SLAP_SOCK_INIT: dtblsize=8192
Apr 11 22:03:02 server.seju.eu slapd[925]: TLS: OPENDIRECTORY_SSL_IDENTITY identity preference overrode configured olcTLSIdentity "APPLE:server.seju.eu"
Apr 11 22:03:02 server.seju.eu slapd[925]: slap_add_listener: opened additional listener 'ldaps:///'
Apr 11 22:03:02 server.seju.eu slapd[925]: bdb(dc=server,dc=seju,dc=eu): unable to allocate memory for mutex; resize mutex region
Apr 11 22:03:02 server.seju.eu slapd[925]: bdb_db_open: database "dc=server,dc=seju,dc=eu" cannot be opened, err 12. Restore from backup!
Apr 11 22:03:02 server.seju.eu slapd[925]: bdb(dc=server,dc=seju,dc=eu): txn_checkpoint interface requires an environment configured for the transaction subsystem
Apr 11 22:03:02 server.seju.eu slapd[925]: bdb_db_close: database "dc=server,dc=seju,dc=eu": txn_checkpoint failed: Invalid argument (22).
Apr 11 22:03:02 server.seju.eu slapd[925]: backend_startup_one (type=bdb, suffix="dc=server,dc=seju,dc=eu"): bi_db_open failed! (12)
Apr 11 22:03:02 server.seju.eu slapd[925]: bdb_db_close: database "dc=server,dc=seju,dc=eu": alock_close failed
Apr 11 22:03:02 server.seju.eu slapd[925]: slapd stopped.
Open Directory Log
2015-04-11 21:57:10.624284 CEST - AID: 0x0000000000000000 - opendirectoryd (build 382.20.2) launched...
2015-04-11 21:57:10.752590 CEST - AID: 0x0000000000000000 - Logging level limit changed to 'error'
2015-04-11 21:57:10.916732 CEST - AID: 0x0000000000000000 - Initialize trigger support
2015-04-11 21:57:10.951833 CEST - AID: 0x0000000000000000 - Loaded bundle at path '/System/Library/OpenDirectory/Modules/SystemCache.bundle'
2015-04-11 21:57:10.958469 CEST - AID: 0x0000000000000000 - Module: SystemCache - failed to load persistent state - Input/output error
2015-04-11 21:57:10.962533 CEST - AID: 0x0000000000000000 - Registered node with name '/Active Directory' as hidden
2015-04-11 21:57:10.962833 CEST - AID: 0x0000000000000000 - Registered node with name '/Configure' as hidden
2015-04-11 21:57:10.963182 CEST - AID: 0x0000000000000000 - Discovered configuration for node name '/Contacts' at path '/Library/Preferences/OpenDirectory/Configurations//Contacts.plist'
2015-04-11 21:57:10.963194 CEST - AID: 0x0000000000000000 - Registered node with name '/Contacts'
2015-04-11 21:57:10.963438 CEST - AID: 0x0000000000000000 - Registered node with name '/LDAPv3' as hidden
2015-04-11 21:57:10.966901 CEST - AID: 0x0000000000000000 - Registered node with name '/Local' as hidden
2015-04-11 21:57:10.968600 CEST - AID: 0x0000000000000000 - Registered node with name '/NIS' as hidden
2015-04-11 21:57:11.031990 CEST - AID: 0x0000000000000000 - Discovered configuration for node name '/Search' at path '/Library/Preferences/OpenDirectory/Configurations//Search.plist'
2015-04-11 21:57:11.032007 CEST - AID: 0x0000000000000000 - Registered node with name '/Search'
2015-04-11 21:57:12.343838 CEST - AID: 0x0000000000000000 - Discovered configuration for node name '/LDAPv3/127.0.0.1' at path '/Library/Preferences/OpenDirectory/Configurations/LDAPv3/127.0.0.1.plist'
2015-04-11 21:57:12.343888 CEST - AID: 0x0000000000000000 - Registered subnode with name '/LDAPv3/127.0.0.1'
2015-04-11 21:57:13.549377 CEST - AID: 0x0000000000000000 - Loaded bundle at path '/System/Library/OpenDirectory/Modules/legacy.bundle'
2015-04-11 21:57:13.551131 CEST - AID: 0x0000000000000000 - Loaded bundle at path '/System/Library/OpenDirectory/Modules/search.bundle'
2015-04-11 21:57:13.554053 CEST - AID: 0x0000000000000000 - '/Search' has registered, loading additional services
2015-04-11 21:57:13.554064 CEST - AID: 0x0000000000000000 - Initialize augmentation support
2015-04-11 21:57:13.557920 CEST - AID: 0x0000000000000000 - Successfully registered for Kernel identity service requests
2015-04-11 21:57:13.557940 CEST - AID: 0x0000000000000000 - Adjusting kernel ID cache (100 -> 250) and membership cache (100 -> 500)
2015-04-11 21:57:13.575235 CEST - AID: 0x0000000000000000 - Loaded bundle at path '/System/Library/OpenDirectory/Modules/PlistFile.bundle'
2015-04-11 21:57:13.578418 CEST - AID: 0x0000000000000000 - Loaded bundle at path '/System/Library/OpenDirectory/Modules/FDESupport.bundle'
2015-04-11 21:57:13.583810 CEST - AID: 0x0000000000000000 - Loaded bundle at path '/System/Library/OpenDirectory/Modules/AppleID.bundle'
2015-04-11 21:57:13.615788 CEST - AID: 0x0000000000000000 - Loaded bundle at path '/System/Library/OpenDirectory/Modules/ConfigurationProfiles.bundle'
2015-04-11 21:57:13.619666 CEST - AID: 0x0000000000000000 - Registered subnode with name '/Local/Default'
2015-04-11 21:57:13.632498 CEST - AID: 0x0000000000000000 - Loaded bundle at path '/System/Library/OpenDirectory/Modules/ldap.bundle'
2015-04-11 21:57:13.845588 CEST - AID: 0x0000000000000000 - Loaded bundle at path '/System/Library/OpenDirectory/Modules/AppleODClientLDAP.bundle'
2015-04-11 21:57:13.849664 CEST - AID: 0x0000000000000000 - Loaded bundle at path '/System/Library/OpenDirectory/Modules/AppleODClientPWS.bundle'

I had a similar problem. A couple days after upgrading, I encountered OD's "Unable to load replica" problem and had my server's certificate deleted from my system keychain!
Server.app + OD + LDAP are all extremely fragile and I just don't trust them during transitions, so I always keep an independent bootable backup with Carbon Copy Cloner and this preflight script. I'll post my notes for recovering OD below, but in my case, nothing worked this time, and I couldn't start OD robustly across reboots. Fortunately for me, my 12 hour old bootable backup was working, so I just used CCC to copy my bootable backup back. Not sure what I would have done had that not worked short of rebuilding everything from scratch.
Pre-steps:
0. Bootable backups, Time Machine backups, and dirserv backups of everything.
1. Disk Utility: Fix disk permissions, Fix disk
2. PRAM reset, Command-Option-P-R at boot
3. DiskWarrior to rebuild the disk directory
Possible steps to fix OD:
# Fix Open Directory "Unable to load replica"
# Try this first:
# https://support.apple.com/en-us/HT200018
# Quit Server.app
sudo mkdir /var/db/openldap/migration/
sudo touch /var/db/openldap/migration/.rekerberize
sudo killall PasswordService
# Open Server.app
# Try this second:
# http://apple.stackexchange.com/questions/79141/how-to-fix-failing-open-directory -database-cn-authdata-cannot-be-opened-err
sudo serveradmin stop dirserv
sudo launchctl unload -w /System/Library/LaunchDaemons/org.openldap.slapd.plist
sudo db_recover -h /var/db/openldap/authdata/
sudo /usr/libexec/slapd -Tt
sudo launchctl load -w /System/Library/LaunchDaemons/org.openldap.slapd.plist
sudo serveradmin start dirserv
# Try this third:
# https://discussions.apple.com/thread/6018956
sudo serveradmin stop dirserv
sudo slapconfig -restoredb /private/var/backups/ServerBackup_OpenDirectoryMaster.sparseimage
sudo serveradmin start dirserv
# Try this fourth (assuming ccc_preflight od backup):
# https://discussions.apple.com/thread/6018956
sudo serveradmin stop dirserv
sudo slapconfig -restoredb /private/var/backups/odbackup/od_2015-04-11.sparseimage
sudo serveradmin start dirserv
# Try this last:
sudo rsync -va /your-backup-drive-possibly-TM/private/var/db/openldap/authdata/ /private/var/db/openldap/authdata/
If your server cert gets deleted from the System keychain, you'll need to boot into the bootable backup and export the certificate+key that looks like hostname.domainname.tld, signed by IntermediateCA_HOSTNAME.DOMAINNAME.TLD_1, copy this to the server drive, import back into the System keychain. The cert should then appear within Server.app again. See here for how to do this if all you have is the System keychain file.
If anyone has reliable advice how to fix a corrupt OD that would be a huge help.

Reconfigure Open Directory in Yosemite Server

Is it possible to delete and reconfigure Open Directory in Yosemite server?
The host name and configuration were modified after Open Directory was activated and I get the message "Unable to load replica list" in the Settings Tab of Open Directory on the Server App (Server 4.0.3 (Build 14S350)). I think the best way would be to start over the automatic configuration.

Many Open Directory problems can be resolved by taking the following steps. Test after each one, and back up all data before making any changes.
1. The OD master must have a static IP address on the local network, not a dynamic address. It must not be connected to the same network with more than one interface; e.g., Ethernet and Wi-Fi.
2. You must have a working DNS service, and the server's hostname must match its fully-qualified domain name. To confirm, select the server by name in the sidebar of the Server application window, then select the Overview tab. Click the Edit button on the Host Name line. On the Accessing your Server sheet, Domain Name should be selected. Change the Host Name, if necessary. The server must have at least a three-level name (e.g. "server.yourdomain.com"), and the name must not be in the ".local" top-level domain, which is reserved for Bonjour.
3. The primary DNS server used by the server must be itself, unless you're using another server for internal DNS. The only DNS server set on the clients should be the internal one, which they should get from DHCP if applicable.
4. Only if you're still running Mavericks server, follow these instructions to rebuild the Kerberos configuration on the server.
5. If you use authenticated binding, check the validity of the master's certificate. The common name must match the hostname and domain name. Deselecting and then reselecting the certificate in Server.app has been reported to have an effect in some cases. Otherwise delete all certificates and create new ones.
6. Unbind and then rebind the clients in the Users & Groups preference pane. Use the fully-qualified domain name of the master.
7. Reboot the master and the clients.
8. Don't log in to the server with a network user's account.
9. Disable any internal firewalls in use, including third-party "security" software.
10. If you've created any replica servers, delete them.
11. If OD has only recently stopped working when it was working before, you may be able to restore it from the automatic backup in /var/db/backups, or from a Time Machine snapshot of that backup.
12. As a last resort, export all OD users. In the Open Directory pane of Server, delete the OD server. Then recreate it and import the users. Ensure that the UID's are in the 1001+ range.
If you get this far without solving the problem, then you'll need to examine the logs in the Open Directory section of the log list in the Server app, and also the system log on the clients.

Open Directory won't start after crash no logins

Server was crashed due to work in the room. OD will not start. I've tried every fix I can find, but the main problem is that this command will not work:
sudo launchctl unload /System/Library/LaunchDaemons/org.openldap.slapd.plist
I also have time machine backups but which files should I replace? Thanks

Hi,
First thing to check is that DNS is set up correctly.
in Terminal, type:
$ sudo changeip -checkhostname
This should return your server IP address, current hostname and DNS hostname; the hostnames should be the same.
Finally it should issue a message that says:
The names match. There is nothing to change.
dirserv:success = “success”
if there is a mismatch here, you will need to fix in the Network tab of the Server app, and the DNS settings.
It could also be a problem with a remnant of a previous OD setup although you say that you are attempting to set it up, so not sure why there would be a remnant.
You can "clean out" the old LDAP info by issuing this command but it will wipe out your Open Directory databases on the machine you issue it on; you have been warned....
Doing this will then let Server app prompt you in the OD settings to 1. set up OD or 2. restore from an archive.
The command is:
$ sudo slapconfig -destroyldapserver
Finally , if you are having problems, turn on logging:
$ sudo slapconfig -enableslapdlog
this writes OD logs to /var/log/slapd.log
Hope that helps. I had that exact issue on a server that was hosting a replica and that stopped working after update of server.app .

Changing the Name of an Open Directory Server while preserving users, etc.

Hi Everyone,
Not an emergency - but I have been wrestling with this dilemma for almost a year now.
The good news is nothing has to be done right away. But I will ultimately need a solution.
We have inherited a server system at a traditional elementary school from a previous IT person who was immature to say the least.
When he set up the server system, he named the open directory server something that, while innocuous is inappropriate for a school setting. I am sure he thought it was clever and cheeky at the time. But a few years later it is simply unprofessional. And we are being expected to ultimately be able to change it so something like "XXXdirectory.domainname.edu" The more it hangs around - the longer it looks like we did this and it makes us look unprofessional.
So here is my dilemma.
This is an OD Master with iCal and network homes attached to it. It also runs DNS.
I would like to set up a new server and name it "xxxdirectory.schooldomainname.edu"
Setting up the new server is easy and getting all the client machines to bind to it - no problem.
The problem is how to migrate all the users to the new server. It seems a restore wont work because if the new server is named differently, the restore will fail. I also can't do a server migration because the stupid name migrates to the new server.
My old server is 10.5.8 Server. The new one is 10.7.1 Server . But could be 10.6.8 Server if need be.
The main problem is how do I get all the accounts onto a new server with a new OD master name?
I don't mind command line stuff. So throw whatever you got at me.
Thanks in advance for your help everyone. Don't worry - I won't be a pain in the butt or argue. I just need some good solid guidance, even if it is a "Not possible" answer - at least I have something to tell the administration when they want to know why we can't change the OD Master name from mcnugget.schoolname.edu.
Please let me know if you need more details. I am happy to provide.
Thanks again.
Tony

If you don't mind resetting everybodies password then you can export the users and groups and wipe the server for a clean install or turn it into a standalone server then back into od master then import the users and groups.

My open directory vanished, anyone know where it could be?

I run a Mac Mini server with 10.7.4. When I first set it up I enabled open directory, set it to be a master, etc. I configured about 75 user acoounts with permissions, syncing, and whatnot. Everything worked perfectly, all my users could log in, save to their share, etc. That was 9 months ago.
Yesterday I go into the server app to make a new user and my 75+ users are gone. In their place is my local user account and something called PostgreSQL. I went into Workgroup Manager and I now get the message "You are working in a directory node that is not visible to the network". Open Directory is still listed in Server Admin with a little green bubble indicating it thinks it's just fine. A little above that is a line that says "Available servers (0)", I dont recall if it always said that.
Is there any trick to getting my directory back other then killing the whole thing and redoing it? Although I think I could recreate the directory in 15 minutes or so, I would think it would take me hours to recreate my users, permissions, etc.

Place the iPod in Recovery mode and then connect the iPod to your computer and restore via iTunes.
iOS: Wrong passcode results in red disabled screen

Urgent: Open Directory stopped and won't restart

I got into work this morning and restarted the server. Now no one can connect to it. The Open Directory service has stopped and there is no button visible to restart it.
OD log says: Network transition occurred. Shutting down DirectoryService...
Any ideas? Monday morning and everyone's going to be baying for blood!
Edit: some of the configuration log:
2009-11-23 08:58:34 +0000 - popen: /bin/launchctl load /System/Library/LaunchDaemons/com.apple.PasswordService.plist, "r"
2009-11-23 08:58:34 +0000 - command failed with exit code 256: /bin/launchctl load /System/Library/LaunchDaemons/com.apple.PasswordService.plist
2009-11-23 08:58:34 +0000 - popen: /bin/cp -r /Volumes/ldap_bk/openldap /etc/, "r"
2009-11-23 08:58:34 +0000 - command failed with exit code 256: /bin/cp -r /Volumes/ldap_bk/openldap /etc/
2009-11-23 08:58:34 +0000 - 4 Restoring LDAP database
2009-11-23 08:58:34 +0000 - popen: /bin/cp /Volumes/ldap_bk/com.apple.openldap.plist /Library/Preferences/, "r"
2009-11-23 08:58:34 +0000 - command failed with exit code 256: /bin/cp /Volumes/ldap_bk/com.apple.openldap.plist /Library/Preferences/
2009-11-23 08:58:34 +0000 - Removed file at path /private/var/db/openldap/openldap-data/alock.
2009-11-23 08:58:34 +0000 - popen: /usr/sbin/slapadd -c -l /tmp/slapconfig_stage1777mOX7M/backup177.ldif, "r"
2009-11-23 09:16:45 +0000 - slapconfig -restoredb
2009-11-23 09:16:45 +0000 - command: /usr/bin/hdiutil attach /.ServerBackups/openDirectory/SBSBackup_OpenDirectoryMaster.sparseimage -readonly
2009-11-23 09:16:48 +0000 - Disk name disk4
2009-11-23 09:16:48 +0000 - Error: Cannot retrieve the primary IPv4 address.
2009-11-23 09:16:48 +0000 - command: /usr/bin/hdiutil detach disk4
2009-11-23 09:17:04 +0000 - hdiutil command output:
hdiutil: couldn't eject "(null)" - Bad file descriptor
2009-11-23 09:17:04 +0000 - hdiutil command failed with status 3
2009-11-23 09:17:04 +0000 - Warning: Could not detach the archive, exit code 71.

Well I got everyone's files off onto an external hard drive and then restored from backup. Took a couple hours but it's fine. Only problem now is I'm too scared to restart the server.

Lion: All Open Directory users obliterated

After a rough migration from SLS, I've been running Lion Server successfully for a couple of weeks now. However, this morning I saw that the file sharing services were down. When I brought the server up on the monitor, the Finder was frozen solid. I had to do a hard restart, and once it came up, all the Open Directory users are gone. Only local users remain. When I attempt to open the LDAP directory in Workgroup Manager it throws up a -14006 error.
I'm going to attempt to rebuild the machine from a backup last night, but I'm wondering if anyone has any (quicker) advice.
I'm tempted to just try and copy /var/db/openldap from the backup image over to the server, but I'm afraid it'll simply explode. Is there a better alternative? I don't have a current backup archive of *just* the open directory stuff...

Restoring from a backup image "fixed" it of course, but I'm still curious how to restore the open directory database from a mirrored partition (i.e. without the use of an explicite restore from an open directory backup)

Open directory restore

Similar Messages

Maybe you are looking for