Migrate Domain in Open Directory

[Sean Howard]

Okay. We have our box almost ready to go. But joy. It turns out we have to change both the IP and the Domain.

I have the info on running changeip, but am finding very little on changing the domain.

We are running Open Directory on a 10.3 brand new xserve. It is configured to be the Open Directory Master (article followed).

I have managed to get a second DB installed following the OpenLdap documentation but it doesn’t appear in any of the Mac tools.

I’m hesitant to proceed too far as I can’t find any references. What is involved in changing the domain from dc=host, dc=com to dc=newhost, dc=com ??

I assume I have to create the new domain from scratch but concerned about the best process/steps to follow so I don’t end up locked out of the box. 🙂

Anyone faced this one and willing to share?

Sean

[Sean Howard]

Thank you.

We were assuming that hostname was just the server name (hostname), not the fully qualified hostname.

Sweetness.

[Sean Howard]

Okay.

New challenge. Not sure if I should start a new thread. I think we have a solution but things are a little weird now.

We ran changeip and changed from (for the case of this argume) dc=host,dc=com to dc=newhost,dc=ca

ChangeIP ran and worked as the new IP number took effect.

But, when I checked in Directory Access we are still going to “dc=host,dc=com”.

I then went and did a slapcat. The ldap is all still dc=host, dc=com.

So. I edited the LDIF, changing all the references to dc=newhost, dc=ca. I stopped slapd, mv’ed and recreated the openldap-data, relaunched slapd, and did a slapadd on my LDIF file.

Changed Directory Access to authenticate on dc=newhost,dc=ca and all is working.

My concern is as follows:
* we have a couple entries in the LDIF that are from the old setup and I’m not sure if I can delete them (userid’s for hostcom groups).
* more importantly, when we looked in the Kerberos DB (with SSO_Util), it still thinks it is host.com, not newhost.ca

We are still in pre-deployment.

Can I just start with an empty DBD data file? And add accounts?

We are currently an Open Directory Master with no replicating going on.

[Author]

Posts