After changeip, the old IP address is still in the LDAP database?

[louislam]

Hi all,

I recently readdressed my network and the IP address of my 10.3 server changed from 192.168.100.1 to 172.27.1.1. I used:

changeip /LDAPv3/127.0.0.1 192.168.100.1 172.27.1.1

then changed the IP address in the Control Panel and rebooted. Everything comes up just fine and I could login and authenticate to the Directory successfully, so everything looked great. After updating the client configs they could all authenticate successfully too.

Being curious, I started to wonder what was changed in the LDAP database, so I did some quick dig around:

# cd /private/var/db/openldap/openldap-data
# strings * | grep 172.27
…
;ApplePasswordServer;< password hash removed >
root@evergreen.home:172.27.1.1
…

# strings * | grep 192.168
<string>192.168.100.1</string>
….
;ApplePasswordServer;< password hash removed > root@evergreen.home:192.168.100.1
…
ldap://192.168.100.1

evergreen.home is the FQDN of the system, and the password hash strings are identical, except the IP address at the end.

Then I took a Powerbook, with tcpdump running, configured it to use the server at the new IP address. Here’s what showed up on the wire:

<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"&gt;
<plist version="1.0">
<dict>
<key>Attribute Type Map</key>
<array>
<dict>
<key>Native Map</key>
<array>
<string>cn</string>
</array>
<key>Standard Name</key>
<string>dsAttrTypeStandard:RecordName</string>
</dict>
</array>
<key>Enable Use</key>
<true/>
<key>LDAP PlugIn Version</key>
<string>DSLDAPv3PlugIn Version 1.5</string>
<key>Map Search Base</key>
<string>cn=config,dc=home</string>
<key>OpenClose Timeout in seconds</key>
<integer>15</integer>
<key>Port Number</key>
<integer>389</integer>
<key>Record Type Map</key>
…
<key>SSL</key>
<false/>
<key>Search Timeout in seconds</key>
<integer>120</integer>
<key>Server</key>
<string>192.168.100.1</string>
<key>Server Mappings</key>
<false/>
<key>Template Name</key>
<string>Open Directory Server</string>
<key>Template Search Base Suffix</key>
<string>dc=home</string>
<key>UI Name</key>
<string>192.168.100.1</string>
</dict>
</plist>

Any idea why the old IP address is still in the LDAP database, and why is it still returned in the plist? Again, all the clients can authenticate successfully after the IP addresses have changed.

Thanks

[fcote]

You use the root user to do this command? I tried it and this work perfectly!

[Anonymous]

For me, it doesn’t work. changeip does NOTHING to the files it should and still leaves my old ip there.

[Anonymous]

Try specifying the old and new computer names as well. The docs say they’re optional, but I found the command does nothing if they’re not included. You can just specify the same name twice.

[Author]

Posts