Server migration - updating Replica Tree?

Dear All,
I've just moved our server to a new location and new IP, and have made all the neccessary changes (dns, etc) to get all functioning fine and connected to the web - but now that I'm onto network configuration, I see that the IP/hostname entry in the Server Administrator's "Open Directory/General/replica tree" tab are still the old ones. Is there any easy way to change this - without losing user information?

Answering my own question again. The 'usual' linux way of removing old replica addresses is to use "slapconfig -removereplica xx.xx.xx.xxx", but Leopard's binding LAPD to the passwords directory (managed by Workgroup Manager) makes doing this without further authentification impossible.
My problem was twofold because after we had moved our server from one place/IP to another, someone forgot to rebuild Open Directory, so I had to find all instances of our old IP address within and replace it with the new one. The server was still operating till then thanks to DNS lookups, but the extra lookup time when OD came to the inactive old addresses probably slowed things down.
Caution: for one not familiar with the workings of Open Directory, this is not a task easy for the queasy. Read everything below before trying anything.
So we have to use Workgroup Manager. Login as the Directory Administrator, then go to Preferences and activate the 'Show "All Records" tab and inspector. A 'target' tab should appear.
In the drop-down menu just underneath the (selected) target tab, select 'Config'. Inspect everything in the lefthand column for traces of your old IP/Hostname and remove/update them - I found entries in both XML files under 'Kerberos Client', on the top-level (appearing to the right); ;in both XML files under 'ldapreplicas'; towards the bottom of both XML files under 'macosxodconfig'; on the top-level under 'password' server, but pay particular attention to the entries in both XML files there - not only do you have to update the old IP addresses there, you have to ensure that the DNS <key> (under <dict>) in both reflect the actual hostname. Of course you have to hit save after every modification above.
======
I took my depart from the this piece of advice - but as I am NO Open Directory expert, and I am not sure of the importance of the XML files modified above (I get the impression that a few are just preferences that will be re-generated anyways), I would still appreciate any advice or critiques about the steps above - It worked for me until now (the old IP/hostnames are gone and lookups seem to have quickened), but I do not want to mislead anyone reading this.
Thanks, best.

Similar Messages

  • BI (BOE) XI R3.1 (Linux) Server Migration -  Update BOE base directory path

    Hello,
    Performing a server migration using BOE XI R3.1 (from BOE XI R3.1 to same release BOE XI R3.1) on Linux Platform.
    After performing a data restore, the BOE server executables could not be launched (do not start) due to different BOE base directory path in these environments.
    Could someone help point me on how to edit server configuration data to correct the base path in the migrated server?

    Hi,
    Thanks for the input.   Unfortunately, I don't see an option in ccm.sh to delete sia/servers..  Using serverconfig.sh, I tried to recreate the sia using option 1 - Add a Server Intelligence Agent, and this option is supposed to recreate the sia and default servers if it already exists in the database.   However, this yields same result: CMS is running with correct base path, but all servers are not launched since the server configuration path reflects the from environment, and not the current/target environment.
    Thanks again.

  • %SW_DAI-4-DHCP_SNOOPING_DENY after dhcp server migration

    Hello,
    Some weeks ago, we migrated our DHCP server (from windows 2003 to windows 2012 with the new failover features in active/passive mode).
    On our switches ; we have both arp inspection & dhcp snooping enabled. Since the migration, arp inspection is not working correctly : as soon as i activate the arp inspection on our client vlan (96) ; we get errors like : "Sep  1 11:50:39: %SW_DAI-4-DHCP_SNOOPING_DENY: 1 Invalid ARPs (Req) on Fa0/29, vlan 96.([d4c9.efdf.710e/10.0.96.89/0000.0c07.ac60/10.0.127.254/11:50:39 GMT+1 Mon Sep 1 2014])
    Sep  1 11:50:40: %SW_DAI-4-DHCP_SNOOPING_DENY: 2 Invalid ARPs (Req) on Fa0/7, vlan 96.([d485.64b4.0068/10.0.97.214/0000.0000.0000/10.0.127.254/11:50:40 GMT+1 Mon Sep 1 2014])
    If i have a look on the dhcp snooping binding table on the same switch :
    NUKUH052#sh ip dhcp snooping binding
    MacAddress          IpAddress        Lease(sec)  Type           VLAN  Interface
    18:A9:05:F5:28:2B   10.0.97.101      418236      dhcp-snooping   96    FastEthernet0/40
    6C:3B:E5:0D:B3:B2   10.0.96.184      2936        dhcp-snooping   96    FastEthernet0/36
    10:60:4B:7C:A3:14   10.0.97.17       678739      dhcp-snooping   96    FastEthernet0/42
    00:1F:29:02:AA:6B   10.0.98.53       678938      dhcp-snooping   96    FastEthernet0/37
    88:51:FB:80:1B:E1   10.0.97.252      680212      dhcp-snooping   96    FastEthernet0/3
    64:31:50:A3:F8:52   10.0.96.96       341484      dhcp-snooping   96    FastEthernet0/20
    64:31:50:A3:D7:5A   10.0.97.209      677205      dhcp-snooping   96    FastEthernet0/6
    6C:3B:E5:1A:8D:05   10.0.96.255      677165      dhcp-snooping   96    FastEthernet0/8
    00:1F:29:02:AA:EF   10.0.96.207      678365      dhcp-snooping   96    FastEthernet0/1
    00:23:7D:2F:72:E7   10.0.98.152      680376      dhcp-snooping   96    FastEthernet0/16
    Total number of bindings: 10
    Strange, interface FastEthernet0/7 is not in the table !!! and that s the same case for a lot of computers. (of course it s dhcp and not static ip address). 
    Extract of the switch configuration :
    Standard port configuration 
    interface FastEthernet0/7
     switchport access vlan 96
     switchport mode access
     switchport nonegotiate
     switchport voice vlan 192
     switchport port-security maximum 3
     switchport port-security
     switchport port-security aging time 1
     switchport port-security violation restrict
     ip arp inspection limit rate 256 burst interval 10
     no logging event link-status
     mls qos trust dscp
     no snmp trap link-status
     storm-control broadcast level bps 1m
     storm-control multicast level bps 1m
     storm-control action shutdown
     spanning-tree portfast
     spanning-tree bpduguard enable
    General switch settings
    ip dhcp snooping vlan 96
    ip dhcp snooping information option allow-untrusted
    no ip dhcp snooping information option
    ip dhcp snooping
    >> ip arp inspection vlan 96 : as soon as i had this command i have the error messages.
    I already :
    * tested several software version
    * only enabled  a single dhcp server in the helper address
    But i don't find the issue... the problem came when we started up the 2 new dhcp server (with the new 2012 dhcp failover feature). We have the same issue on all the switches of this LAN (the same config is running fine on the other factory we own).
    Can you help me to solve that issue ?

    Hi,
    I just attached the file containing the filtered caps ; taken simultaneously on both dhcp servers. As we are using HSRP ; it looks like the dhcp messages are not doubled, but quadruplet.
    Below the HSRP configuration on one of our both core switches :
    interface Vlan96
     ip address 10.0.127.252 255.255.224.0
     ip helper-address 10.0.9.33
     ip helper-address 10.0.9.32
     no ip redirects
     standby 96 ip 10.0.127.254
     standby 96 timers 1 4
     standby 96 priority 80
     standby 96 preempt
     arp timeout 720
    And i also discovered that there are some microsoft bugs related to dhcp failover. Links here :
    http://blogs.technet.com/b/teamdhcp/archive/2014/02/26/dhcp-failover-patch-to-address-a-reservation-issue-and-another-issue-related-to-failover-partner-not-accepting-state-transition-from-bad-address-gt-active-has-been-released.aspx
    and
    http://support.microsoft.com/kb/2831920
    And the active dhcp windows server has not been updated since january 2013.... (so the update are not applied). I ll discuss with my colleague in charge of server to update it asap...

  • Replica tree includes invalid IP address

    I just recently updated the IP address on the server via the system preferences pane, and modified the DNS record to reflect this change; however, after doing so, the old IP address remains within the "Replica Tree" and appears to be causing issues (at least, I am suspecting it as the issue due to LDAP crashes after the IP address change). When I do `changeip -checkhostname`, everything returns as valid so there isn't immediate issues related towards the DNS.
    If there is a way that I can manipulate the replica tree, to remove the old IP address, I do believe that it will resolve the issue that I am having. I tried to edit the actual LDAP config record through WGM's inspector, but it does not appear that the changes took effect. Please someone shed some light here as to how this could be handled, and thank you in advance.

    I had this problem... i can't remember how to fix it though haha.
    Try decommissioning the replica.
    Change the IP back, re-create the replica, then decommission it again.
    Either that, or it's listed in one of the plist files of LDAP/OD services that doesn't show up in WGM inspector. Try a program that can scan text files (i think easyfind?) and have it search every file on your OS HD for the IP string.

  • 10.8.2 ML and 2.1 OS X Server.app Update

    Yeah! finally and hopefully they'll fix the SMB issues in 10.8.2 ML update...
    Also just released today  OS X Server.app 2.1
    What's New in Version 2.1
    The 2.1 update is recommended for all servers running OS X Server on Mountain Lion. This update includes general fixes that enhance stability, compatibility and security of your server. It includes specific fixes for:
    • managing DHCP service from within the Server application
            (NOW THIS IS GREAT that they put DHCP Server GUI back)
    • iOS 6 device management support in Profile Manager
    • using the Server application to create a large number of users or groups
    • authenticating with Calendar Server when using an Active Directory account
    • renewing certificates for use with the Apple Push Notification Service
    • configuring DNS entries with second level domains and aliases
    • migrating from Lion Server and Snow Leopard Server
    For detailed information on this update, please visit this website: http://support.apple.com/kb/HT5497

    I initially had issues, but that was because my DNS was pointing to itself in the network System Preferences. So when Server.App got replaced.. It stopped DNS Servers.. when it was configuring itself it stop at checking Apple push certificates server. I force quit it. Changed to DNS address to a valid one and restarted Server.app.  This time it had no problems configuring itself.
    I noticed it pulled some older settings from the old 10.7.4 migration folder..
    /Library/Server/Previous/
    and attempted to merge some settings with my current stuff.
    It was odd that it took my old self-signed certificates from my 10,7.4 folder.
    So I had to re-update my certicate and Apple push certifcates.
    Noted: With the new server. appl update it removed the /Library/Server/Previous/ folder.
    If I had to go through that update again.., I'll probably removed  /Library/Server/Previous/ folder
    so it can't pull older settings again.
    Anyway things are running fine now.

  • OD Replica tree

    Hi,
    I have a 10.6.8 OD and a 10.6.8.replica. Just recently I noticed some dns errors in the DS error log:
    DNSServiceProcessResult returned -65563
    I have also noticed an IP address in the replica tree that shouldnt be there. It is a range from our windows DHCP server scope. I have a feeling at some point I must have inserted a cable into the xserve's second interface port.
    Anyway, I am trying to remove this entry but without much success. I have removed the unwanted entry from the DSLDAPv3Pluginconfig.plist but it still remains in the replica tree list. I have also restarted.
    Any ideas?
    The IP address in question is not in use and does not respond to a reverse lookup.
    Cheers

    Hey, did you find an answer to this? I have the same problem with invalid IP addresses which won't allow me to edit anything in WorkGroupManager. Even trying to edit the Config files in WGM it won't allow, so I need to locate the file where this information is stored?

  • Server Software Updates

    Is it advisable to have Tiger servers that are replicas a version or two behind the Master in server software updates? I.E. Master at 10.4.8, some replicas at 10.4.7?

    That sounds a bit cumbersome.
    Even disjoining the replicas sounds "much".
    Having a good backup before updating is a good thing and having a recent archive doesn't hurt either.
    But I think updating the master first and then the replicas should suffice. Seems to have worked for me...
    If something goes wrong:
    http://docs.info.apple.com/article.html?artnum=302332

  • Replica tree has unknown addresses

    Hi-
    I set up a replica on my Leopard server from my Snow Leopard server. Checking the Replca Tree does not show the IP or the FQDN of the replica but DOES show a lot of random ips that I have no idea where they came from. The replica is working because Im getting LDAP info from the master on the replica but what are these unknown ips? Am I being hacked?
    Thanks,
    Scott

    Can someone please take a stab at this? The IPs are 172.16.11.119, 10.211.55.2 and 10.37.129.2. The two 10 addresses are associated with vnic0 and vnic1 interfaces that show up under my network interfaces in
    the network tab in server admin admin (I have no idea where they came from either) though I am using a Class A network. The 172 is a complete mystery. Any ideas?
    Like the I said, the replica seems to up but it's ip shows no where in the replica tree and there is nothing in replica status at all.
    Thanks.

  • Installed 10.6.8 Server Combo Update, but can't update Server Tools to 10.6.8?

    Hello all,
    I installed the 10.6.8 combo update for my xserve earlier today. I also need to update the server tools to 10.6.8 since I am trying to create a new NetInstall image from a .dmg that is running 10.6.8.
    The server tools update has always shown up in the past in Software Update, but I didn't see it this time around so I went and found what looks like the download link for it: http://support.apple.com/kb/DL1403.
    Anyway, I get it downloaded and go to install it, and it says my Server HD does not have Mac OS X installed, and it will not install the update.
    I have the 10.6.8 Server Tools installed on my imagebuilder, but it isn't setup with the right workflow and it would be a hassle to get that going.
    Has anyone else had any problems getting the 10.6.8 server tools installed on their xserve?

    @m.mills: I'd be interested to see what your workflow looks like for your image using the 10.6.7 SIU on 10.6.8 Server? I have been struggling trying to get NetInstall or NetRestore to work using this tool. For NetRestore, it tries to install on the MBP, but fails after a minute or two with this error:
    Unable to set '10.6' as boot disk: The bless tool was unable to set the current boot disk."
    I am using the 10.6 retail DVD as source. I have a very basic workflow:
    * source DVD 10.6
    * Enable Automated Intall; install to volume name: 10.6, erase before installing
    * Apply System Configuration Settings - (apply computer name and local hosts setting)
    * Add 10.6.8 combo pkg
    * Create image
    I also have a machine running 10.7 Server and have successfully created a 10.7.2 image, but 10.6.8 has been giving me fits. It would be nice if I could create a 10.6.8 image on the 10.7 server. Is it possible to do this?
    Any Help is appreciated.
    thx

  • (BUG??) Team Foundation Server 2013 Update 4 Support for SQL 2014

    Scenario: On Windows 2012 R2 x64 I have installed SQL, Reporting Services & AS 2014 (applied all updates through Windows Update), SharePoint 2013 Foundation, and installed Team Foundation Server 2013 RTM (did not configure).
    Before configuring TFS, I applied Update 4 to the server (not update 1,2 or 3 directly). When trying to configure I get the following error:
    ==========================
    TF255146: Team Foundation Server requires SQL Server 2012 SP1 (11.00.3000) or greater. The SQL Server instance you supplied is version 12.0.2254.0.
    TF400403: The Report Server instance specified is version 12.0.2254.0, the minimum supported version is 11.0.3000.
    TF400070: A required version of a component is not installed on the application tier. You must exit the Team Foundation Administration Console and install a supported version of either SQL Server Analysis Services of the SQL Server Client Tools on the application
    tier to ensure that the Analysis Services object model is present for warehouse processing.
    ====================================
    My understanding is that as of Update 2 (or was it 3) that SQL 2014 was supported. However it appears if that particular update is not installed directly it bypasses the check. Can someone verify I am seeing the intended result or is this a bug?

    Hi Jazzy,  
    Thanks for your post.
    And thank you for sharing your experience here. It will be very beneficial for other community members having the similar questions.
    All your participation and support are very important to build such harmonious/ pleasant / learning environment for MSDN community.
    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click
    HERE to participate the survey.

  • SharePoint 2013 - Team Foundation Server Dashboard Update job failed

    Hi
    I integrated TFS 2012 with SharePoint 2013 on Windows Server 2012.  SharePoint 2013 farm have 3 WFE and 3 App servers
    here what i did
    Install TFS extension for SP 2013 on each of SP server and granted access of SP web application to TFS server successfully
    in CA - I deployed TFS solutions (wsp) successfully) for wfe3 server
    microsoft.teamfoundation.sharepoint.dashboards.wsp
    microsoft.teamfoundation.sharepoint.dashboards15.wsp
    microsoft.teamfoundation.sharepoint.wsp
    I have a number of SC with TFS features activated and connect with TFS server project site working but I really don't know much about TFS.
           What I see is there are 2 TFS timer jobs "Team Foundation Server Dashboard Update" for each of the web application (web1 and web2)
    running every 30 minutes.
    All jobs on web1 are running and succeed and ran on wfe1 and app3
    but all jobs on web2 are failed and ran on wfe2, wfe3 and app1, app2 with the following error  "An exception occurred while scanning dashboard sites. Please see the SharePoint
    log for detailed exceptions"
    I looked into the log file and it is show the same error but nothing more.
    If anyone experience this or have any advice on how to resolve this, please share
    Thanks
    Swanl

    Hi Swanl,
    It seems that the Dashboard Update timer job will loop through the existing site collection, regardless if it is associated to a TFS site.
    If one or more of this site collection is down/corrupted, this will cause the job to fail.
    You can try the following step to check if the sites are good:
    1. Go to Central Administration > Application Management > View all Site Collections. Proceed to click on each Site collection, and notice the properties for the site on the right hand site.
    If the properties does not show up or errors out, this will need to be fixed.
    2. Detach the SharePoint content database and reattach it to see if the issue still occurs.
    Thanks,
    Victoria
    Forum Support
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
    [email protected]
    Victoria Xia
    TechNet Community Support

  • How to maintain several views of the same data and update a tree

    I have an object UiUser, which is displayed in my application in several different views. There are three different views which all have the User object i.e. search results, user tree and user table. Each of the views has the same menu items, so the user can be deleted from any of the views.
    What I am trying to work out is how should I ensure the item is updated in all of the views?
    I can fire a property change event with the UiUser and update two of the views i.e. search results and user table, but how do I update the tree?
    I thought of overiding the equals/hashcode methods of the UserTreeNode to compare uiUser.getId () and I could then search the tree and find the tree node of the required UiUser. But I have reservations about this whole approach as it just seems wrong.
    Any ideas of how to keep N views in sync, I really don't want all of the views to have tree nodes as this equally seems wrong. This should be a simple problem to solve and I'm sure lots of people have done it, I'm just not sure which is the best approach to take.
    Thanks

    Hi Jan,
    This is so because each installer has a GUID that is used to check whether the application needs to be upgraded or not. (It's a Microsoft function).
    What you can do is create a new installer with a different GUID (copy the installer in the projects), and check witha  text editor whether this GUID has changed.
    But any specific reason you need two seperate installs? You can run the application twice with a specific INI token:
    allowmultipleinstances=True
    Ton
    Free Code Capture Tool! Version 2.1.3 with comments, web-upload, back-save and snippets!
    Nederlandse LabVIEW user groep www.lvug.nl
    My LabVIEW Ideas
    LabVIEW, programming like it should be!

  • ASSERTION FAILED error while migrating update rules

    Hi all,
    We are migrating the 3.x datasource for sd - lo cockpit.
    Migration steps are as follows...
    1. Make a copy of the infosouce. Activate it.
    2. Migrate transfer rules. Activate it.
    3. Migrate datasource.
    4. Migrate Update rules for the respective info providers.
          But while migrating update rules  ASSERTION_FAILED runtime error occurs.
           the assert condition was violated.
           CL_RSTRAN_TEMPLATE========CP or CL_RSTRAN_TEMPLATE======CM003
    Please help i tried all the means to rectify but none succeds.
    It is occuring for each datasource .
    Thanks in advance.
    aravind

    Hello
    Assertion statement is like a conditional break point in ABAP. When you are trying to migrate the update rules,it is failing with Assertion statement it means there is some error with your update rules. Either the mapping is wrong or the the target to which it is mapped is in inactive state. Please check these and retry your migration.
    Regards,
    Krishna Tangudu

  • BW Steps before and after R3 server migration

    Hi Friends,
    We are using ECC6 and BW 3.5.
    My client is going for R3 server migration, yes it's just a migration of server and not any upgrade. This server is quite old so migrating to a higher end server.
    BASIS will do a system copy during downtime i.e. a homogeneous client copy where they would just copy the DB tables. As per them all data will remain same and only the IP will change i.e. i will have to make a change in R3-BW RFC connection.
    I need to know what other pre and post migration steps are involved in this case?
    Thanks,
    BJ

    Hi,
    I dont think that there would be any impact on queues etc due to server migration. We flush out data from queues only in cases of upgrade/ patch application etc. because there is a chance that after the upgrade the structure of datasource may change. In that case, any data lying in queue beforehand would get corrupted and cannot be loaded.
    in your case, there is no such change going to happen, therefore no need to worry about queues. You can go ahead without worrying about any dataloss due to queues.

  • 10.4 Server - software update server - push to clients

    Hello all, after some advice.
    Weve recently built up a 10.4.7 Server running among other services, Software Update. We've been successfull in pushing out managed pref's to clients to retarget their update server etc, updates are working so thats fine..
    heres the issue. most of our mac clients arent admins, they are regular users, thus every time an update needs to install - it will prompt for an admin user's credentials, which we cant have happening.
    Is there a way, to configure either the update server or the clients, to receive updates and install them silently for instance? with no user intervention?
    One way im considering, its a bit messy though, is using apple remote desktop to issue a UNIX command to all selected Mac's, telling them to launch 'softwareupdate -i -r' and execute as root (afaik, you need to be root to execute softwareupdate manually or something) But this seems flaky in testing so far.
    Thanks for any help.
    Eliot.

    Excellent thanks for the suggestions guys... Ive been playing with the cron suggestion to begin with, it seems to work, as in it will download and install recommended updates. Although with the particular update I was trying to install, it didnt seem to follow through correctly.
    it was the latest firmware update for the INTEL iMac's, according to software update via the terminal, it had downloaded and installed the update, and then required a reboot. ok, but after reboot, it hadnt kicked into the firmware install mode. I actually had to download this update via the gui software update in order for it to function correctly, ie reboot, install firmware, reboot again. which is odd?? could be a problem for future updates like this, when using an automated cron task for updates? Or am I just missing something, hehe?
    Otherwise yeah, the ARD option sounds interesting, we're about to purchase ARD3, definately worth a look.

Maybe you are looking for

  • How to recover OS X Mavericks 10.91 without waiting 40 ours?

    Hi. I tried to recover my OS X 10.91 on my Macbook Pro Retina late 2013,because normal download from MAS does not work for that Model. But everytime when i start the recovery the download will need between 35 and 50 ours. I wait 2h and still 5% only

  • Created a new account - now how do I hide documents?

    My friends are always grabbing for my computer for quick internet visits, etc. - but I have some legal documents I'd rather them not see. I created a new account thinking this would solve the issue, but while it reset my internet and applications - a

  • Payment advice Vs Remittance advice

    Folks: Could you please explain me the difference between Payment advice and Remittance advice. Thanks Gita

  • Reciever not detected -- Nano+Nike System Failure

    I'm on my 3rd Nike+ system. After approximately 20+ miles of running, my nano would no longer can detect the reciever. It would 'stop' the workout mid-way through and after that, the nano will not detect the reciever. I've replaced the sensor twice (

  • Old battery for home use and 1 "traveller" battery? good idea?

    My powerbook is my main computer and is connected to the adapter 90% of the time. Would there be a noticable benefit from only using the new battery if i need to go on the road and leave the current battery in the laptop for home use? If so is it bes