AFP548 Changing the world one server at a time.

Migrate Domain in Open Directory

Home › Forums › OS X Server and Client Discussion › Open Directory › Migrate Domain in Open Directory

Viewing 3 posts - 1 through 3 (of 3 total)
  • Author
    Posts
  • January 11, 2005 at 11:15 pm #360366
    Sean Howard
    Participant

    Okay. We have our box almost ready to go. But joy. It turns out we have to change both the IP and the Domain.

    I have the info on running changeip, but am finding very little on changing the domain.

    We are running Open Directory on a 10.3 brand new xserve. It is configured to be the Open Directory Master (article followed).

    I have managed to get a second DB installed following the OpenLdap documentation but it doesn’t appear in any of the Mac tools.

    I’m hesitant to proceed too far as I can’t find any references. What is involved in changing the domain from dc=host, dc=com to dc=newhost, dc=com ??

    I assume I have to create the new domain from scratch but concerned about the best process/steps to follow so I don’t end up locked out of the box. 🙂

    Anyone faced this one and willing to share?

    Sean

    January 12, 2005 at 9:40 pm #360371
    Sean Howard
    Participant

    Thank you.

    We were assuming that hostname was just the server name (hostname), not the fully qualified hostname.

    Sweetness.

    January 13, 2005 at 6:04 pm #360381
    Sean Howard
    Participant

    Okay.

    New challenge. Not sure if I should start a new thread. I think we have a solution but things are a little weird now.

    We ran changeip and changed from (for the case of this argume) dc=host,dc=com to dc=newhost,dc=ca

    ChangeIP ran and worked as the new IP number took effect.

    But, when I checked in Directory Access we are still going to “dc=host,dc=com”.

    I then went and did a slapcat. The ldap is all still dc=host, dc=com.

    So. I edited the LDIF, changing all the references to dc=newhost, dc=ca. I stopped slapd, mv’ed and recreated the openldap-data, relaunched slapd, and did a slapadd on my LDIF file.

    Changed Directory Access to authenticate on dc=newhost,dc=ca and all is working.

    My concern is as follows:
    * we have a couple entries in the LDIF that are from the old setup and I’m not sure if I can delete them (userid’s for hostcom groups).
    * more importantly, when we looked in the Kerberos DB (with SSO_Util), it still thinks it is host.com, not newhost.ca

    We are still in pre-deployment.

    Can I just start with an empty DBD data file? And add accounts?

    We are currently an Open Directory Master with no replicating going on.

  • Author
    Posts
Viewing 3 posts - 1 through 3 (of 3 total)
  • You must be logged in to reply to this topic.