Is this what you’re talking about?

2005-08-29 15:59:50 -0700 – NeST command failed with status 255
2005-08-29 15:59:50 -0700 – Removing replica due to an error adding a Password Server replica.

This is what I had happen once. I had to remove almost all of the replica-related files and then try adding the replica again.

Here is what Apple told me. DO NOT FOLLOW THESE STEPS WITHOUT KNOWLEDGE OF WHAT THEY DO!! This advice was given to me based on my explanation of the problem and log files.

———-
Steps to change the replicas back to Stand Alone and clean up the
databases.

If you never had any replicas, skip to “Steps to rebuild the PWS
database on the master” below.

1. Change the role of the replica back to Stand Alone
2. Check in Workgroup Manager on the old replica and make sure there
are no Local users with Open Directory password types. The admin may
have been set to use OD passwords. Change any with OD passwords to
use Shadow passwords.

3. Make sure you have a directory admin that does not have the same
short name or UID of the local admin. If you don’t, create a new
admin in the Ldap doamin to be used as the directory admin when
creating replicas.

3. Run these commands as root on the replica, ignore the messages “No
such process – nothing found to load” after the NeST command

NeST -stoppasswordserver
mv /var/db/authserver /var/db/authserver.old
mv /var/db/krb5kdc /var/db/krb5kdc.old
mv /etc/krb5.keytab /etc/krb5.keytab.old
mv /Library/Preferences/edu.mit.Kerberos /Library/Preferences/
edu.mit.Kerberos.old

4. On the master, use WGM inspector mode.
Go to the Target, and select Config from the popup menu

Remove any passwordserver_XXXXX records
In the passwordserver record, remove any references to the replica in
the PasswordServerList. Select the PasswordServerList, click Edit,
remove the text (see below for text example), click Ok and Save.

5. Go to Config / ldapreplicas -> LDAPReadReplicas if there is more
the one, open it up, see if the replicas ip addresss is listed. If it
is select it and press “delete” on the keyboard (Don’t click the
Delete Icon, this would delete the “ldapreplica” record. Click Save.

6. Then remove the replica from the /var/db/authserver/
authserverreplicas, the text is the same as above.

A replica entry will look like this, find the entry with the
ipaddress that matches your replica

EntryModDate
2005-08-15T21:15:52Z
IDRangeBegin
0x00000000000000000000000000000209
IDRangeEnd
0x000000000000000000000000000003fd
IP
192.192.255.227
LastSyncFailedAttempt
2005-08-15T21:15:03Z
ReplicaName
Replica1
ReplicaStatus
PermissionDenied
SASLRealm
replicahostname
SyncInterval
86400


If there are no remaining replicas you can remove this line too

Replicas

7. On the master Kill PasswordService so the replica remove takes effect

# killall -9 PasswordService

It will restart on it’s own

8. Make sure the /var/db/authserver/authserverreplicas file is
correct and not empty.

# more /var/db/authserver/authserverreplicas

If the is a problem use the /var/db/authserver.old/authserverreplicas
file and make the correction again and killall -9 PasswordService
again. Recheck.