Open Directory setState error

Hi,
I had an Open Directory system working fine, rebooted my (Mac Mini 2011) server and now it refuses to start. I get:
"An error occurred on the server while processing a command. The error occurred while processing a command of type 'setState' in plug-in 'servermgr_dirserv'"
I had this error before on an old installation of OS X which I have since reinstalled.
What's going on? Open Directory seems to me to be completely and utterly unstable, and not fit for purpose. All of a sudden it's stopped working and therefore I can't login using my normal username and password. What gives?!

Looking at the logs I'm getting these errors:
[email protected]:/private/var/tmp/OpenLDAP/OpenLDAP-208.1~6/servers/slapd
Sep 30 19:48:32 woz.private slapd[1629]: slap_add_listener: opened additional listener 'ldaps:///'
Sep 30 19:48:32 woz.private slapd[1629]: bdb(dc=woz,dc=private): file id2entry.bdb has LSN 1/1837404, past end of log at 1/1693634
Sep 30 19:48:32 woz.private slapd[1629]: bdb(dc=woz,dc=private): Commonly caused by moving a database from one database environment
Sep 30 19:48:32 woz.private slapd[1629]: bdb(dc=woz,dc=private): to another without clearing the database LSNs, or by removing all of
Sep 30 19:48:32 woz.private slapd[1629]: bdb(dc=woz,dc=private): the log files from a database environment
Sep 30 19:48:32 woz.private slapd[1629]: bdb(dc=woz,dc=private): /var/db/openldap/openldap-data/id2entry.bdb: unexpected file type or format
Sep 30 19:48:32 woz.private slapd[1629]: bdb_db_open: database "dc=woz,dc=private": db_open(/var/db/openldap/openldap-data/id2entry.bdb) failed: Invalid argument (22).
Sep 30 19:48:32 woz.private slapd[1629]: backend_startup_one (type=bdb, suffix="dc=woz,dc=private"): bi_db_open failed! (22)
Sep 30 19:48:32 woz.private slapd[1629]: bdb_db_close: database "dc=woz,dc=private": alock_close failed
Sep 30 19:48:32 woz.private slapd[1629]: slapd stopped.

Similar Messages

Open Directory startup error

Hi,
10.8.2 / Server 2.2
Attempting to turn Open Directory fails with the message:
An error occurred on the server while processing a command.
The error occurred while processing a command of type 'setState' in plug-in 'servermgr_dirserv'
How can I resolve this?
Thanks.

Thanks for replying. It's a new install, and it worked for about 2 days before it stopped working. I'm not sure what changes I made to break OD.
I'm probably not knowlegable enough to understand the log file, even if I knew where to look. Apple did position this as "server for the rest of us" with a low price, so I'm using it to learn. And since I'm using this to learn, I don't mind starting over. But as far as I can see I see no option of creating a new master database, only a replicate record.
Again, thanks for replying.

Open Directory Setup Error

I attempted to set up the Open Directory on Lion Server. I entered all the information and clicked the Setup button. It said it had an error while setting it up and that I should restart the Server to fix it. I did that and now when I go to connect, I get the message "An error occurred while attempting to bind diradmin to 192.168.1.90. Please try again." Now what? Is there a way to clear the settings and start over? Mac Mini - Server 10.7.2.

I just encountered this error. "An error occurred while attempting to bind diradmin to ' and the my local IP address.
What fixed it for me was to set the IP address to 127.0.0.1 (which means the current machine) rather than the current machine's actual IP address. Of course it should be the same thing, but it seems to be picky!

Open directory install error

Hello,
I have a MAC Mini with OSX 10.8.4 and Server 2.2.1 ,
I am trying to configure Profile Manager on the Server.app but i encountered after a long time an error :
when i create Open Directory master .
LDAP log:
Jul 12 16:17:58 mdm.dom-ad-etandex.fr slapd[1970]: @(#) $OpenLDAP: slapd 2.4.28 (Apr 25 2013 19:11:59) $
[email protected]:/private/var/tmp/OpenLDAP/OpenLDAP-208.4~3/servers/slapd
Jul 12 16:17:58 mdm.dom-ad-etandex.fr slapd[1970]: daemon: SLAP_SOCK_INIT: dtblsize=8192
Jul 12 16:17:58 mdm.dom-ad-etandex.fr slapd[1970]: /etc/openldap/slapd_macosxserver.conf: line 228: invalid path: No such file or directory
Jul 12 16:17:58 mdm.dom-ad-etandex.fr slapd[1970]: slapd stopped.
sudo -changeip checkhostname is succesful even dig work.
I tryied to reinstall Server.app , rm some directory but i still have this error...
Does someone has any clue ?

I have the exact same issue, same setup.

Open directory replica error

Hi.
Just upgraded two 10.7 servers, one master and one replica to 10.8.2. Found replica was no longer a replica. Went to add it. Errors. Tried a preflight check. This is what it tod me.
2012-12-18 03:40:28 +0000 NSMutableDictionary *_getRootDSE(const char *): rootDSE not found
2012-12-18 03:40:28 +0000 Error: Unable to determine the master's software version.
Any ideas? Thanks

you can not mix versions of the os when doing a replica so
10.4.x can only replicate 10.4.x
10.5.x can only replicate 10.5.x
it is in the docs.

Open Directory authentication error

Hi,
I am trying to create a replica with 10.8 server.
Steps:
Create OD on server 1.
Create Replica on server 2. All works fine
Restore OD. Replica stop working. I get an error message saying that I cannot authentificate against diradmin on main OD.
What is the step to either merge the database or create a new diradmin password. This is driving me nuts!
Tks

Get a working master with all your users first.
Make sure DNS (forward and reverse) is correct from both locations.
Then add the replica.
There's a good chance the OD you are restoring has references to an older hostname or IP, this can break your setup.
Depending on the size of your setup.. it may be less painful not to bother restoring your old OD and just create from users/groups scratch (leaving behind the possibility of bringing in issues related to your previous OD config).
Its a hassle.. but looking for a needle in a haystack is also.

Open directory in mavericks server.

Setting up mavericks server - open directory displays error " server was successfully configured as a directory server but an error occurred" I have tried everything. Can anyone help ?

Does the server show up in the Server list as (Master)? If so, delete it, make absolutely sure your DNS set up and try again.
Even though I hsve a fully qualified Domain name, SERVER.DOMAIN.COM and my reverse lookup set weith my ISP. if I do a lookup for the IP of my server it returns server.domain.com, found Open Directory was much happier if I used the DNS server on the Server Itselfl
In Server DNS created a Primary Zone for my doman, domain.com. Then a Machine A Record for server,domain.com. It automatically made a nameserer record of server.domain.com and the Reverse Zone and server mapping for reverse lookup. Then set it to perform lookups for this server only. Then set 127.0.0.1 as the First DNS server in System Network Settings before any ISP DNS Servers. Then for good measure also entered my ISPs DNS servers in as forwarding servers. Then setup Open Directory with the correct domain with no errors.

While trying to open Open Directory, I get a setState error

I'm runing Server 2.2 on a new 2012 Mac Mini 2.6 running Mountain Lion 10.8.2
My server was running fine for over a month then I updated to Server 2.2 from 2.1 and I lost my Open Directoy and it would not restart. I kept getting this message. Then all of a sudden it started working for no reason.
Now another month later, I update the firmware on the mac mini, restart the mac and again, Open Directory won't launch and I get this message AGAIN.
I've searched all over and tried every little advice I've gathered here and there but nothing has done the trick.
Can anyone help ?
Thanks.

I am also getting this issue Paul.
I have tried (with my limited knowledge) to get rid of all the OD preferences etc (as just playing with server) I have deleted the server app, and all files, but still when I set it up i get the same message, rather than (what I was expecting) an option to make a new OD.
Very frustrated.
Tom

Creating Open Directory Replica fails with Server Admin Error Value 1127

Hallo,
I have seen a lot of similar threads here and they were helpful up to a certain point, but in the end, they did not solve my problem.
Currently, it comes down to this. The Server Admin Error message ist really meaningless and I could not find a single for the error value on the whole wide web. As such, I switched to the command line versions of the tools involved to geht more meaningful results. It worked. Specifically, creating a replica of an openldap master means using slapconfig.
When executing
slapconfig -createreplica master.ourdomain.com diradmin
as root on the prospective replica machine, I get the following error message:
ssh command failed with status 127
That command is not allowed with the root account via public key authentication.
That makes perfect sense to me, but how is it meant to work then?
Executing slapconfig as admin tells me that this tool is to be executed as root. On the other hand, root login via ssh is not allowed in Mac OS X by default, which seems fine to me. I even changed /etc/sshd_config on the Open Directory Master machine to "PermitRootLogin yes". However, neither reloading ssh using launchctl nor restarting the whole server made this setting operational. Trying to login from command line as root still tells me:
root login is not permitted to this machine via public key authentication.
While this is the current state where I need help urgently, I changed some other things before. I tell about to exclude these issues as possible reason of failure. I got this message for quite a while:
Replica Setup failed : This machine does not have a valid computer name
I was sure, this machine meant the target machine, the open directory master, because the domain had changed there once before I had taken over responsibility as an admin in this environment. And in fact, changeip disguised an issue there. The command proposed by changeip to fix the situation did not seem appropriate because this machine is multihomed with a public and a private IP adress. Proper name resolution is available for both interfaces including reverse lookup. I dont like this setup, but it was the only way to get mail service running smoothly. Running changeip on the machine itself using these arguments
changeip /LDAPv3/127.0.0.1 internalIP internalIP old.ours.com current.ours.com
reported success in updating password server, open directory, both interfaces, hostconfig (which in fact did not change) and samba. It reported an issue with kadmin which is related to Kerberos (we dont use Kerberos yet).
Changing the hostname of the server using changeip did not solve the issue. I then found the hint to check with scutil. This showed that the Hostname was not set on the prospective replica machine. (A question aside: in how many place is the hostname stored? The traditional /etc/hostname has gone, but seems to be replaces with several other configuration files and databases. I cant see this as an advantage). Setting the hostname using scutil worked fine. However, it did not solve the problem either. At least, slapconfig now started to complain about not being able to log in as root instead of failing from the start.
I also checked all log files on bboth machines that might have to do with openldap, as there are /var/log/slapd.log, /var/log/system.log and /Library/Log/slapconfig.log. I also checked the log of th layer on top of openldap which is /Library/Log/DirectoryService.server.log. None of them revealed anything noticeable beside a lot of of entries that I have googled in the last few hours and which all dont seem to be associated with the problem in question.
I will take a break now, but I have to fix this until tomorrow and I hope to get the ultimate hint from you, dear reader.
Thanks and bye, Christian Völker

ssh command failed with status 127
That command is not allowed with the root account via public key authentication.
Initial OD replication takes place via 'ssh'. If you have 'sshd' configured on the OD Master to authenticate with public keys then the OD replica will not be able to communicate with the OD Master via 'ssh'. You must configure the OD Master to use 'ssh' with password authentication and root login enabled.
Demote the replica back to standalone. Stop any services that you may have running on the primary network interface. Then stop any services that you may have running on the secondary network interface. In the 'Network' System Prefpane remove the IP number from the secondary interface then deactivate the secondary network interface.
Assign the private IP address and hostname that you wish to use for the replica to the primary network interface. Assign the 'public' IP number to the secondary interface. Check the DNS to see that the IP address and hostname for the primary network interface resolve both forward and reverse for the hostname of the replica that you have chosen. If it does not, fix your DNS before proceeding.
In the 'Sharing' System Prefpane, change the name of the machine to the hostname (server.domain.tld) of the replica that you have chosen. Then use 'changeip -checkhostname' to see if the IP/hostname matches. Fix it if it doesn't.
Then configure the /etc/sshd_config file on the OD master like this:
\# Authentication:
PermitRootLogin yes
PasswordAuthentication yes
PubkeyAuthentication no
and the /etc/ssh_config file on the OD replica like this:
PasswordAuthentication yes
PubkeyAuthentication no
Then from the OD replica as the 'root' user issue:
slapconfig -createreplica <ODMasterIPorFQDN> <diradmin user>
Make sure that the 'diradmin' user's password contains only alpha-numeric characters -no 'option-characters' or symbols, change it first if it does. Once the process completes, reactivate the secondary interface for the 'public' IP and check the configuration of services that will be using that IP, then start your other services. Secure the 'ssh' service on both machines to disable password authentication and 'root' logins.

I can't start a open directory, it gives an error saying: check network config

Hi,
to begin with, i'm dutch so sorry for my bad writing.
Setup:
Mac mini OSX server mountion lion 10.8.5
local users
cisco rvs4000
I'm having an issue since i changed my networks WANIP because we got a new and better internet line.
Also the new inviroment comes with a new router.
Now here's the problem, since this change i couldn't set up a VPN L2TP connection anymore..
So i looked at the VPN log, but there wasn't any text referring to a VPN L2TP connection. And yes i forwarded ervery port,
UDP 1701,500,4500 and the ESP 50 protocol is forwarded by the cisco router with the standard VPN passtrough option.
The next thing i tried is setting up an PPTP connection, after this i got the error: identity is not accepted. this time the VPN log gives me
an error:
0x0> <magic 0x628df8e6> <pcomp> <accomp>]
Thu Oct 17 12:42:33 2013 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x2b13fb41> <pcomp> <accomp>]
Thu Oct 17 12:42:33 2013 : rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x2b13fb41> <pcomp> <accomp>]
Thu Oct 17 12:42:33 2013 : sent [LCP EchoReq id=0x0 magic=0x2b13fb41]
Thu Oct 17 12:42:33 2013 : sent [CHAP Challenge id=0x2f <7b651c211c2065155c574d41732c394e>, name = "server.xxxxxx.private"]
Thu Oct 17 12:42:33 2013 : rcvd [LCP EchoReq id=0x0 magic=0x628df8e6]
Thu Oct 17 12:42:33 2013 : sent [LCP EchoRep id=0x0 magic=0x2b13fb41]
Thu Oct 17 12:42:33 2013 : rcvd [LCP EchoRep id=0x0 magic=0x628df8e6]
Thu Oct 17 12:42:33 2013 : rcvd [CHAP Response id=0x2f <eb158db194714bbd1f17f0aeae993927000000000000000012f827aea75c2b6cb2dbcbbd3bfabb 1bb6a7534d96d956f300>, name = "vpnuser"]
Thu Oct 17 12:42:33 2013 : DSAuth plugin: unsupported authen authority: recved Kerberosv5;;vpnuser@LKDC:SHA1.F0E4A62A66239C74E50793F3F30997F086074A1E;LKDC:SHA1 .F0E4A62A66239C74E50793F3F30997F086074A1E, want ApplePasswordServer
Thu Oct 17 12:42:33 2013 : DSAuth plugin: MPPE key required, but its retrieval failed.
Thu Oct 17 12:42:34 2013 : sent [CHAP Failure id=0x2f "S=4E4083190FD57B13DA38015F52FE14F8F594766A M=Access granted"]
Thu Oct 17 12:42:34 2013 : CHAP peer authentication failed for vpnuser
Thu Oct 17 12:42:34 2013 : sent [LCP TermReq id=0x2 "Authentication failed"]
Thu Oct 17 12:42:34 2013 : Connection terminated.
Thu Oct 17 12:42:34 2013 : PPTP disconnecting...
Thu Oct 17 12:42:34 2013 : PPTP disconnected
2013-10-17 12:42:34 CEST --> Client with address = 192.168.1.205 has hungup
When i googled for this problem all the awnsers were based on OD users and my in situation there were only local users.
So i thought if i just add all my users ( 10 local users ) to an OD it should fix my problem but here comes the next thing.
When i tried to configure an Open directory it gives me an error that the OD couldn't finish and to check my network settings.
sudo changeip -checkhostname gives me the right adress, dns seems to be ok. The error that console constantly gives is:
servermgd: servermgr_accounts: got error 5000 trying to auth to local LDAP node
and
WARING found KDC certificate
and
ntdp: GetConfig: Couldn't open </private/etc/ntp_opendirectory.conf
I'm stuck at this point, never seen this problem before.. someone knows a fix or work around for this??
thanks in advance

To check the local network for some of the common configuration problems, launch Terminal.app and issue the following diagnostic command:
sudo changeip -checkhostname
That'll report some local configuration information and then either no errors detected and no changes required, or it'll point to whatever configuration errors or issues it might detect. That doesn't catch everything, but it catches the common errors.
FWIW, 192.168.0.0/24 and 192.168.1.0/24 are poor choices for the local network, as VPNs are based on IP routing and IP routing gets tangled when the same subnet is used on both ends of the VPN. 192.168.0.0/24 and 192.168.1.0/24 are near ubiquitous in home networks and coffee shops.

Open directory error 4001 occurred

When trying to add a new user I get an error message of:
"User creation failed
The server reported the error 'Open Directory error 4001 occurred' while trying to create the user."
I can find nothing about this error and what it means. I've Googled and searched the Snow Leopard server documentation.
This is a recent, clean install of Snow Leopard server (installed about a week ago) with all updates so it is now running 10.6.1. I had no problem adding 7 other accounts on days 1 and 2 after the install, but now cannot add another.
Any help greatly appreciated.
Thanks

Not sure what happened, but I rebooted the server and now everything appears to be working again.
I'm wondering if this problem was caused by changes I made to the DNS server (also running on this server)? Maybe Open Directory cannot handle certain DNS changes without restarting?

Error creating new Open Directory domain

The wizard for creating a new Open Directory domain in Server.app on Mountain Lion responds with the following error message:
     "An error occurred while configuring My Server as a directory server. Please check your network configuration and try again."
Not very helpful. How do find out what the actual error is?
Thanks.

Can anyone translate these log messages?
Aug 12 05:22:26 myhost.mydomain.com kdc[60240]: label: default
Aug 12 05:22:26 myhost.mydomain.com kdc[60240]:         dbname: od:/Local/Default
Aug 12 05:22:26 myhost.mydomain.com kdc[60240]:         mkey_file: /var/db/krb5kdc/m-key
Aug 12 05:22:26 myhost.mydomain.com kdc[60240]:         acl_file: /var/db/krb5kdc/kadmind.acl
Aug 12 05:22:26 myhost com.apple.launchd[1] (com.apple.Kerberos.kpasswdd[60241]): Exited: Killed: 9
Aug 12 05:22:26 myhost com.apple.launchd[1] (com.apple.Kerberos.kpasswdd): Throttling respawn: Will start in 10 seconds
Aug 12 05:22:26 myhost com.apple.launchd[1] (com.apple.Kerberos.kadmind[60242]): Exited: Killed: 9
Aug 12 05:22:26 myhost com.apple.launchd[1] (com.apple.Kerberos.kadmind): Throttling respawn: Will start in 10 seconds
Aug 12 05:22:26 myhost.mydomain.com kdc[60240]: WARNING Found KDC certificate (O=System Identity,CN=com.apple.kerberos.kdc)is missing the PK-INIT KDC EKU, this is bad for interoperability.
Aug 12 05:22:26 myhost.mydomain.com kdc[60240]: KDC started
Aug 12 05:22:26 myhost.mydomain.com Server[46707]: An error occurred while configuring My Mac Mini Server as a directory server:
        Error Domain=XSActionErrorDomain Code=-1 "A child action failed" UserInfo=0x7fb854a2ad90 {XSActionErrorActionsKey=(
            "Creating Open Directory master"
        ), NSLocalizedDescription=A child action failed}

Lots of errors for some computers bound to open directory

Once in a while we get a lot of errors in our logs related to a computer bound to open directory. Could anyne explain what these are and how we can prevent them?
Aug 20 2009 10:21:07 KERBEROS-LOGIN-CHECK: user {0x498342082562a7f70000020c000001e5, fps_archives$} authentication failed.
Aug 20 2009 10:31:07 KERBEROS-LOGIN-CHECK: user {0x498342082562a7f70000020c000001e5, fps_archives$} authentication failed.
Aug 20 2009 10:36:31 KERBEROS-LOGIN-CHECK: user {0x498342082562a7f70000020c000001e5, fps_archives$} authentication failed.
Aug 20 2009 10:41:07 KERBEROS-LOGIN-CHECK: user {0x498342082562a7f70000020c000001e5, fps_archives$} authentication failed.

I'm not sure that last output means anything useful. In lwp_cond_wait, the value for arg2 is a pointer to struct timespec_t. Since arg2 itself is typed uint64_t, what you're quantizing on are raw pointer values, not time. timespec_t looks like this:
typedef struct timespec {          /* definition per POSIX.4 */
     time_t          tv_sec;          /* seconds */
     long          tv_nsec;     /* and nanoseconds */
} timespec_t;

Open Directory Error -14136 occurred - Can't Create New User

I am trying to create a new user account so a contract employee and I am repeatedly getting this error.
The Server Reported the Error "Open Directory Error -14136 occurred" while trying to create this user.
I've done a search for this error code and no dice. Any ideas. Is something hosed in my Directory file?
I am hoping not to have to redo the whole lot as we are on a deadline.
Any help would be appreciated.

Check out this tread, you are not alone but there doesn't seem to be a single solution...
http://discussions.info.apple.com/thread.jspa?threadID=2262981
I had this code and MY solution came from the fact that I had turned OFF DNS because I couldn't see that "I" was using it. turning it back on and ensuring that it was correctly configured solved it for me!

Mac OS Server Open Directory Will Not Turn On

Yesterday I got the server application for Mac OS Mountain Lion. This is my first time working with apple server software and when I try to turn on Open Directory it says:
An Error occured on the server while processing a command.
The error occurred while processing a command of type 'setState' in plug-in 'servermgr_dirserv'.
I am not sure what is causing this. I am running the server on a 2010 iMac with Mountain Lion installed and I couldn't find any answers online. Any help would be much appriciated.
Edit: I would be willing to reinstall the server software and reset settings for it if I have to. (I just don't know how)

Thanks _Franck_!
I had to do a few more steps than and modify the recover command based on info from Case #2 - http://www.iredmail.org/forum/topic3694-iredmail-support-power-cut-ldap-dont-sta rt.html
1. check if this is the problem
$ sudo /usr/libexec/slapd -Tt
>> bdb_db_open: database "cn=authdata": db_open(/var/db/openldap/authdata/id2entry.bdb) failed: Invalid argument (22).
2. Stop LDAP on OD Master
$ sudo launchctl unload /System/Library/LaunchDaemons/org.openldap.slapd.plist
3. Repair Permissions
$ diskutil repairPermissions /
4. backup openldap db
$ sudo cp /var/db/openldap/authdata/id2entry.bdb /var/db/openldap/authdata/id2entry.bdb.backup
5. repair
$ sudo db_recover -cv -h /var/db/openldap/openldap-data/
>> Recovery complete at Thu Jun 6 11:01:35 2013
>> Maximum transaction ID 8000060e Recovery checkpoint [2][6589846]
6. run repair again to check
$ sudo db_recover -cv -h /var/db/openldap/openldap-data/
>> Finding last valid log LSN: file: 2 offset 6589938
>> Recovery starting from [1][28]
>> Recovery complete at Thu Jun 6 11:02:32 2013
>> Maximum transaction ID 8000060e Recovery checkpoint [2][6589938]
7. double check if things were repaired correctly
$ sudo /usr/libexec/slapd -Tt
>> bdb_monitor_db_open: monitoring disabled; configure monitor database to enable
config file testing succeeded
8. restart the service
$ sudo launchctl load /System/Library/LaunchDaemons/org.openldap.slapd.plist

Open Directory setState error

Similar Messages

Maybe you are looking for