Upgrade from 10.6.8 to Mavericks server: issue with authenticated bind

Hello, I have tried upgrading a 10.6.8 server to 3.1.2 Mavericks server and found I can't bind 10.9.x clients.
I need to keep using authenticated bind to manage clients in Workgroup Manager
I have exported the 10.6.8 OD database and imported into a clean installation of Mavericks 3.1.2 server and everything went fine that far.
I then noticed that authenticated bind in Mavericks now requires SSL and the certiicate.
Once I have imported the 10.6.8 OD database into the new server (same name and IP), only the selfsigned certificate coming from the 10.6.8 server is being imported and OD service remains "unprotected" without any certificate assigned (it seems I can't change this)
The problem is I can successfully bind 10.8.x clients against the 10.9 server while this seems not to be possible with 10.9.x clients when using authenticated bind.
If I create a new OD domain, there's an intemediate certificate assigned by default and I can bind 10.9.x clients (authenticated bind).
Am I missing something obvious?
Many thanks for your help
Cheers
Carlo

Hello and many thanks to all for your hints
@Strontium90 I am aware I should move to profiles and I am working towards this goal, but I had mixed results as far as reliability here.
Anyway, I took my time to perform the upgrade once again from scratch and it's defenatly something related to certificates
The only way to (authenticated) bind a 10.9 test client is when I create a new OD domain and the server uses the intemediate certificate that it's automatically created and assigned to OD service
Using the sefl-signed certificate (the existing one - that is imported along with the OD DB - or a new one assigne to it) does not work with the imported DB.
This is the error I get when I try to bind with dsconfigldap
iMac-di-admin:~ admin$ sudo /usr/sbin/dsconfigldap -vsemgx -a my.ODserver.FQDN.com
Password:
dsconfigldap verbose mode
Using suggested computer ID <imac-di-admin>
Options selected by user:
Enforce Secure Authentication is enabled
SSL was chosen
Add server option selected
Server name provided as <my.ODserver.FQDN.com>
Computer ID provided as <imac-di-admin>
Local username determined to be <root>
Enforce man-in-the-middle only policy if server supports it.
Adding new node to search policies
Enforce packet encryption policy if server supports it.
Enforce packet signing policy if server supports it.
Certificates will be automatically added to your system keychain in order to talk to this server.
Would you like to continue (y/n)? y
Error: Description unavailable (9006)
While this is the error I get from Directory Utility
I think I'll seek support from a consultant... ...it all seems beyod my skills
Many thanks again!
Carlo

Similar Messages

  • Upgrade from ECC 6.0 EHP5 to EHP7 issue with PO header

    HI Experts,
    We  Upgrade the  Ecc 6.0  recently  from EHP 5 To EHP 7. In EHP 5 when we select the PO type  (REW - Reject ) in ME21N , Reject tab will appear at header level.
    In EHP 7 When we enter the PO type (REW - Reject ) in ME21N ,Reject tab will not appearing and  it is asking for the organisation elements  and vendor .After entering the all the organisation data only reject tab appear in header level.
    My client wants EHP 5 Functionality in EHP 7.What clould be the reason to behave like this.How to achive this requirement.
    Regards,
    Venkat.

    Hi Krishna Rao,
          It is proved lot of times if you are upgraded new enhancement package in the server then enhancements need to re-check and  do manually development in new server  and retesting in quality server before moving  to Production server. 
    Ask Abaper to check whether enhancement updated in new enhanced server . If no then Abaper need to update manually.
    Regards,
    Ravindra

  • I was going to upgrade from 10.6.8 to mavericks 10.9.2, but the installer program notified me stating my appleworks 6 app will not run on the new set up. is there a procedure to keep or switch my documents in order to obtain the mavericks upgrade?

    i was going to upgrade from 10.6.8 to mavericks 10.9.2, but the installer program notified me stating my appleworks 6 app will not run on the new set up. is there a procedure to keep or switch my documents in order to obtain the mavericks upgrade?

    I can't say personally since I never used AW, but see if these articles help:
    http://www.macworld.com/article/1166370/open_old_docs.html
    http://www.cultofmac.com/248546/convert-system-os-9-appleworks-6-files-to-os-x-p ages-files-os-x-tips/
    I suggest that you clone your current drive with 10.6.8 to an external drive. If you have any issues after upgrading to Mavericks, you can boot back into 10.6.8.
    Both of these applications can be used to create a clone. If you need help creating your clone, let us know.
    SuperDuper! http://www.shirt-pocket.com/
    CCC http://www.bombich.com/download.html

  • Upgraded from 10.6.8 to Mavericks last week on my MacBook Pro running the 2.4 GHz i5 and it's painfully slow on start-up- I mean, 5 minutes or more, to be fully functional... Is this normal?

    Upgraded from 10.6.8 to Mavericks last week on my MacBook Pro running the 2.4 GHz i5 and it's painfully slow on start-up- I mean, 5 minutes or more, to be fully functional... Is this normal?

    Try these in order testing your system after each to see if it's back to normal:
    1. a. Resetting your Mac's PRAM and NVRAM
        b. Intel-based Macs: Resetting the System Management Controller (SMC)
    2. Restart the computer in Safe Mode, then restart again, normally. If this doesn't help, then:
         Boot to the Recovery HD: Restart the computer and after the chime press and hold down the
         COMMAND and R keys until the Utilities menu screen appears. Alternatively, restart the
         computer and after the chime press and hold down the OPTION key until the boot manager
         screen appears. Select the Recovery HD and click on the downward pointing arrow button.
    3. Repair the Hard Drive and Permissions: Upon startup select Disk Utility from the Utilities menu. Repair the Hard Drive and Permissions as follows.
    When the recovery menu appears select Disk Utility. After DU loads select your hard drive entry (mfgr.'s ID and drive size) from the the left side list.  In the DU status area you will see an entry for the S.M.A.R.T. status of the hard drive.  If it does not say "Verified" then the hard drive is failing or failed. (SMART status is not reported on external Firewire or USB drives.) If the drive is "Verified" then select your OS X volume from the list on the left (sub-entry below the drive entry,) click on the First Aid tab, then click on the Repair Disk button. If DU reports any errors that have been fixed, then re-run Repair Disk until no errors are reported. If no errors are reported click on the Repair Permissions button. Wait until the operation completes, then quit DU and return to the main menu. Select Restart from the Apple menu.
         Reinstall the 10.9.2 update: OS X Mavericks 10.9.2 Update (Combo).
    4. Reinstall Lion/Mountain Lion, Mavericks: Reboot from the Recovery HD. Select Reinstall Lion/Mountain Lion, Mavericks from the Utilities menu, and click on the Continue button.
    Note: You will need an active Internet connection. I suggest using Ethernet if possible because it is three times faster than wireless.
    Reinstall the 10.9.2 update: OS X Mavericks 10.9.2 Update (Combo).

  • Upgrading from 10.6.8 to Maverick

    I get this message "This software is not supported on your system" when I try upgrading from 10.6.8 to Maverick
    Hardware Overview:
      Model Name:    iMac
      Model Identifier:    iMac7,1
      Processor Name:    Intel Core 2 Duo
      Processor Speed:    2 GHz
      Number Of Processors:    1
      Total Number Of Cores:    2
      L2 Cache:    4 MB
      Memory:    3 GB
      Bus Speed:    800 MHz
      Boot ROM Version:    IM71.007A.B03
      SMC Version (system):    1.20f4
      Serial Number (system):    W8*****X85
      Hardware UUID:    00000000-0000-1000-8000-001B63A6DE9D
    <Personal Information Edited by Host>

    Did you check out against the Specifications ....  
    http://support.apple.com/kb/ht5842
    I seem to recall reading that the 2Ghz machine would be slow and that you would also need at least 4GB of RAM.   I think your machine is right on the borderline.

  • Upgrade from Indesign CS3 to Indesign CS5 server

    Hi,
    I have been looking on adobe site to check if I can have an upgrade from Indesign CS3 to Indesign CS5 server. I have Indesign CS3 license but need to migrate to Indesign CS5 server. Does anybody know whether it is possible to buy upgrade from Indesign CS3 to Indesign CS5 server. Or will I have to buy new license for Indesign CS5 server. Any help on this is appriciated. Thanks.

    Hi,
    Thanks for your reply.
    I have been using Indesign CS3 for generating automated reports. These reports are large in numbers. Limitation with Indesign CS3 is it only allows single instance of the application. And hence I am forced to generate these reports in sequence using multiple servers. Indesign CS5 server on the other hand seems to allow multiple instances running at the same time. This would mean I can generate multiple reports at the same time. This will reduce time to generate these reports and also limit the number of servers. This is the reason I want to migrate from Indesign CS3 to Indesign CS5 server. However, I am not sure if I can get direct upgrade from Indesign CS3 to Indesign CS5 server or I have to buy new license for Indesign CS5 server. Do you have any idea on this, please suggest. Thanks in advance for your response.
    Regards,
    Chaitan.

  • Is Mavericks OS X 10.9.3 compatible with CS6? I am thinking of upgrading from 10.8.5 to Mavericks. Thanks

    Is Mavericks OS X 10.9.3 compatible with CS6? I am thinking of upgrading from 10.8.5 to Mavericks. Thanks

    Is Mavericks OS X 10.9.3 compatible with CS6? I am thinking of upgrading from 10.8.5 to Mavericks. Thanks

  • What is the procedure of Call Manager upgrade from version CUCM 7.1 (MCS Server) to version CUCM 10.2 (on UCS server)

    Hi
    What is the procedure of Call Manager upgrade from version CUCM 7.1 (MCS Server)  to version CUCM 10.2 (on UCS server) , please let me know the steps to what would be the backup procedures and upgrades.
    Regards
    Gaurav

    I'd suggest reading this guide to make sure you have prepared your environment to support 10.x first. The link below also contains the upgrade path to 10.0(1).
    One of the ways you can do this is:
    1/ Apply refresh upgrade cop file on all servers in cluster.
    2/ Upgrade the cluster to 8.6(2). Take a backup of the cluster.
    3/ Build a cluster of 8.6(2) servers on VMs, and assign them the same hostnames and IP address as the hardware cluster. (You may need to keep these on a separate network until switching off the hardware machines)
    4/ Restore the backup taken from the hardware cluster on to the VM cluster.
    5/ Upgrade VM cluster to 10.0(1).
    http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/upgrade/10_0_1/CUCM_BK_U4214F9D_00_upgrade-guide-cucm-100/CUCM_BK_U4214F9D_00_upgrade-guide-cucm-100_chapter_010.html#CUCM_RF_UA60AFAB_00

  • Please can someone tell me why I cannot reinstall my upgrade from lightroom 4 (lightroom 3 installed off disc with serial no) my hard drive crashed, and I am trying to get lightroom 3; 4 and 5 back on so that I can link my catalogues and continue work. I

    Please can someone tell me why I cannot reinstall my upgrade from lightroom 4 (lightroom 3 installed off disc with serial no) my hard drive crashed, and I am trying to get lightroom 3; 4 and 5 back on so that I can link my catalogues and continue work. I cannot install lightroom 5 until the upgrades from 4 are on the pc, (lightroom 3 installed off disc but 4 is a copy of the upgrade download I got when I bought it) These serial no's are legit and  are registered under my account with adobe, but it still gives me the Big Red Cross when I put my serial no in! Please can someone help. I am at a loss. Thx Heidi

    Please can someone tell me why I cannot reinstall my upgrade from lightroom 4 (lightroom 3 installed off disc with serial no) my hard drive crashed, and I am trying to get lightroom 3; 4 and 5 back on so that I can link my catalogues and continue work. I cannot install lightroom 5 until the upgrades from 4 are on the pc, (lightroom 3 installed off disc but 4 is a copy of the upgrade download I got when I bought it) These serial no's are legit and  are registered under my account with adobe, but it still gives me the Big Red Cross when I put my serial no in! Please can someone help. I am at a loss. Thx Heidi

  • Plerase can someone tell me why I cannot reinstall my upgrade from lightroom 4 (lightroom 3 installed off disc with serial no) my hard drive crashed, and I am trying to get lightroom 3; 4 and 5 back on so that I can link my catalogues and continue work. I

    Please can someone tell me why I cannot reinstall my upgrade from lightroom 4 (lightroom 3 installed off disc with serial no) my hard drive crashed, and I am trying to get lightroom 3; 4 and 5 back on so that I can link my catalogues and continue work. I cannot install lightroom 5 until the upgrades from 4 are on the pc, (lightroom 3 installed off disc but 4 is a copy of the upgrade download I got when I bought it) These serial no's are legit and  are registered under my account with adobe, but it still gives me the Big Red Cross when I put my serial no in! Please can someone help. I am at a loss. Thx Heidi

    BrightBluephotograph wrote:
    I cannot install lightroom 5 until the upgrades from 4 are on the pc,
    You don't need to have Lightroom 3 and 4 installed on your computer to install Lightroom 5.  Just install Lightroom 5 and input your serial number for 3 in the previous version box and your serial number for 5 in the upgrade box.

  • I want to but Photoshop CS6 as an upgrade from CS5. Don't want to fool with CC.

    I want to but Photoshop CS6 as an upgrade from CS5. Don't want to fool with CC

    Photoshop CS6 will supposedly still be available for some time at least from Adobe.
    Edit: What a regrettable developement at Adobe that CC business is …

  • Upgradation from CRM 4.0 to CRM 7.0 with respect to sales order.

    Hi All,
    Can you please tell me what are all the  'EEWB enchacement changes' to be carried out during upgrade from CRM 4.0 to CRM 7.0 with respect to sales order..
    Thanks & Regards
    Prasanna

    hi
    check out the upgradation Note available in the Master Lists for upgradation.

  • Regarding Sun Java System Application Server Issue with JVM

    Regarding Sun Java System Application Server Issue with JVM
    Hi
    I have installed SJSAS9.1 on solaris system. I m trying to deploy war file which i compiled in windows enviorment by jdk1.5.0_05. Every time i got the following error :
    type Exception report
    message
    descriptionThe server encountered an internal error () that prevented it from fulfilling this request.
    exception
    org.apache.jasper.JasperException: PWC6033: Unable to compile class for JSP
    PWC6199: Generated servlet error:
    [javac] javac: invalid target release: 1.5
    [javac] Usage: javac
    [javac] where possible options include:
    [javac] -g Generate all debugging info
    [javac] -g:none Generate no debugging info
    [javac] -g:{lines,vars,source} Generate only some debugging info
    [javac] -nowarn Generate no warnings
    [javac] -verbose Output messages about what the compiler is doing
    [javac] -deprecation Output source locations where deprecated APIs are used
    [javac] -classpath Specify where to find user class files
    [javac] -sourcepath Specify where to find input source files
    [javac] -bootclasspath Override location of bootstrap class files
    [javac] -extdirs Override location of installed extensions
    [javac] -d Specify where to place generated class files
    [javac] -encoding Specify character encoding used by source files
    [javac] -source Provide source compatibility with specified release
    [javac] -target Generate class files for specific VM version
    [javac] -help Print a synopsis of standard options
    note The full stack traces of the exception and its root causes are available in the Sun Java System Application Server 9.1 logs.
    I have cheked jvm version on both system the only difference is :
    Solaris points to jdk 1.5.0_09
    Windows point to jdk1.5.0_05
    Even i tried to run blank jsp also but again i got the same error.
    Can any help me to sort out the problem or give me any idea so i can do something by my own.
    Thanks in Advance
    Gagan

    Do you have ANT installed and available?
    Thanks,
    Kedar

  • I have iPhone 4.  I don't want to upgrade to iOS 7 because people have had issues with that.  Is there a way I can just upgrade to iOS 6?

    I have iPhone 4.  I don't want to upgrade to iOS 7 because people have had issues with that.  Is there a way I can just upgrade to iOS 6?

    No, it is not possible. When upgrading the iOS on the phone, the only one you can install is the latest version, which for the iPhone 4 is iOS 7.0.4.

  • I have CS2 and would like to do Image Stacking.    I understand CS3 allows this.  correct?     Am I wiser to purchase CS3 upgrade.  Am I going to run into issues with install?

    I have CS2 and would like to do Image Stacking.    I understand CS3 allows this.  correct?     Am I wiser to purchase CS3 upgrade.  Am I going to run into issues with install?

    Well, I refuse to sign up to pay Adobe a monthly tribute for life too, but that doesn't mean we are limited to CS3.
    I'm staying with CS6.
    Adobe still sells a perpetual-license to Photoshop CS6 without the subscription model, but it's $700 for the Standard version and a cool $1,000 for the Extended version.
    You haven't mentioned your platform, Macintosh or Windows, so make sure CS3 or any other obsolete version you buy actually runs on a modern operating system.
    Good luck.

Maybe you are looking for