After changeip, the old IP address is still in the LDAP database?

Hi all,

I recently readdressed my network and the IP address of my 10.3 server changed from 192.168.100.1 to 172.27.1.1. I used:

changeip /LDAPv3/127.0.0.1 192.168.100.1 172.27.1.1

then changed the IP address in the Control Panel and rebooted. Everything comes up just fine and I could login and authenticate to the Directory successfully, so everything looked great. After updating the client configs they could all authenticate successfully too.

Being curious, I started to wonder what was changed in the LDAP database, so I did some quick dig around:

# cd /private/var/db/openldap/openldap-data
# strings * | grep 172.27
…
;ApplePasswordServer;< password hash removed >
root@evergreen.home:172.27.1.1
…

# strings * | grep 192.168
<string>192.168.100.1</string>
….
;ApplePasswordServer;< password hash removed > root@evergreen.home:192.168.100.1
…
ldap://192.168.100.1

evergreen.home is the FQDN of the system, and the password hash strings are identical, except the IP address at the end.

Then I took a Powerbook, with tcpdump running, configured it to use the server at the new IP address. Here’s what showed up on the wire:

<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"&gt;
<plist version="1.0">
<dict>
<key>Attribute Type Map</key>
<array>
<dict>
<key>Native Map</key>
<array>
<string>cn</string>
</array>
<key>Standard Name</key>
<string>dsAttrTypeStandard:RecordName</string>
</dict>
</array>
<key>Enable Use</key>
<true/>
<key>LDAP PlugIn Version</key>
<string>DSLDAPv3PlugIn Version 1.5</string>
<key>Map Search Base</key>
<string>cn=config,dc=home</string>
<key>OpenClose Timeout in seconds</key>
<integer>15</integer>
<key>Port Number</key>
<integer>389</integer>
<key>Record Type Map</key>
…
<key>SSL</key>
<false/>
<key>Search Timeout in seconds</key>
<integer>120</integer>
<key>Server</key>
<string>192.168.100.1</string>
<key>Server Mappings</key>
<false/>
<key>Template Name</key>
<string>Open Directory Server</string>
<key>Template Search Base Suffix</key>
<string>dc=home</string>
<key>UI Name</key>
<string>192.168.100.1</string>
</dict>
</plist>

Any idea why the old IP address is still in the LDAP database, and why is it still returned in the plist? Again, all the clients can authenticate successfully after the IP addresses have changed.

Thanks