matters have improved somewhat by removing the irrelevant interfaces from /Config/ldapreplicas, leaving just 192.168.1.253(ldap.nowhere.com)
but I still have Open Directory binding to the primary interface 192.168.1.254(pri.nowhere.com) rather than the preferred ldap.nowhere.com
$ ldapsearch -LLL -x -h ldap.nowhere.com -b “” -s base “(objectclass=*)” dnsHostName krbName
dn:
dNSHostName: pri.nowhere.com
krbName: ldap/pri.nowhere.com@LDAP.NOWHERE.COM
changip is inappropriate in this case as it renames just about everything on the server rather than only dNSHostName & krbName, is there a way to safely edit these records?