Home › Forums › OS X Server and Client Discussion › Open Directory › Client DSLDAPv3PlugInConfig.plist doesn’t update (10.3 OD)
- This topic has 1 reply, 1 voice, and was last updated 18 years, 5 months ago by
cmcfarling.
-
AuthorPosts
-
May 28, 2008 at 4:20 pm #372904
cmcfarling
ParticipantI’ve got two 10.3.9 OS X Servers, 1 OD Master and 1 OD Replica. These are serving 15 or so 10.3 & 10.4 desktop machines. Server01 is running DHCP which is configured to provide LDAP info to clients. Server Admin for DHCP >> LDAP is setup as follows:
Server Name: server01.mydomain.com
Search Base: cn=config,dc=mydomain,dc=comI’ve checked all of the documentation and forum posts I can find on this matter and everything appears to be setup correctly.
– DNS is configured properly, forward and reverse resolution woks for both servers
– hostname command returns proper FQDN
– Config/ldapreplicas contains proper entries for read & write replicas
– Replication is working between server01 & server02
– DHCP is supplying clients with the correct LDAPv3 config for Directory Access(on client)
— Use DHCP-supplied LDAP Server is checked
— Supplied Configuration Name = 127.0.0.1, Server Name or IP Address = server01.mydomain.com, LDAP Mappings = From Server, Enabled checkbox is checked
– Clients are able to authenticate to the ODSo here’s the problem… For failover purposes, Directory Services on the client machines is supposed to keep track of all OD master and replica servers in a replication group. After connecting to to OD it’s supposed to write this info to /Library/Preferences/DirectoryService/DSLDAPv3PlugInConfig.plist. However none of my client machines are doing that. In fact that file has not been modified in 2+ years on every machine I’ve checked. The DSLDAPv3PlugInConfig.plist file contains:
<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple. com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>LDAP PlugIn Version</key> <string>DSLDAPv3PlugIn Version 1.5</string> </dict> </plist>No mention of any servers at all. This has been this way for a long time apparently. It obviously hasn’t been a huge problem since I’m just now looking into it. However I’d like to get this working properly so I have a better understanding of what to be aware of when/if I upgrade these servers.
Chris
May 29, 2008 at 4:02 pm #372917cmcfarling
ParticipantWhat is the record called specifically? Here’s a screenshot of what cn=config looks like now with the ldapreplicas record hilighted:
http://www.50amp.com/od/ldap.jpg
Is a record missing?
-
AuthorPosts
- You must be logged in to reply to this topic.