LDAP Server dont start

Question

peterkoch Author

Level 1

0 points

LDAP Server dont start

After updating to 10.6.8 update 1.1 the Open dorectory is corrupt. LDAP dont start.

Any ideas

2011-08-28 12:10:22 +0200 - slapconfig -createldapmasterandadmin

2011-08-28 12:10:22 +0200 - Creating password server slot

2011-08-28 12:10:22 +0200 - command: /usr/sbin/mkpassdb -a -u diradmin -p -q

2011-08-28 12:10:22 +0200 - command: /usr/sbin/mkpassdb -a -u root -p -q

2011-08-28 12:10:22 +0200 - command: /usr/sbin/mkpassdb -a -u mail.hutdesign.at$ -p -q

2011-08-28 12:10:22 +0200 - command: /usr/sbin/mkpassdb -setcomputeraccount 0x4e5a140e6b8b45670000000400000004

2011-08-28 12:10:22 +0200 - Setting SASL realm to <mail.hutdesign.at>

2011-08-28 12:10:22 +0200 - command: /usr/sbin/mkpassdb -setrealm mail.hutdesign.at

2011-08-28 12:10:22 +0200 - command: /bin/launchctl load -w /System/Library/LaunchDaemons/com.apple.PasswordService.plist

2011-08-28 12:10:23 +0200 - command: /usr/bin/net getlocalsid

2011-08-28 12:10:24 +0200 - Starting LDAP server (slapd)

2011-08-28 12:10:24 +0200 - command: /usr/bin/ldapadd -c -x -H ldapi://%2Fvar%2Frun%2Fldapi

2011-08-28 12:10:24 +0200 - ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)

2011-08-28 12:10:24 +0200 - command: /usr/sbin/slaptest -f /etc/openldap/slapd.conf -F /etc/openldap/slapd.d

2011-08-28 12:10:25 +0200 - Stopping LDAP server (slapd)

2011-08-28 12:10:27 +0200 - Starting LDAP server (slapd)

2011-08-28 12:10:27 +0200 - command: /usr/bin/ldapmodify -c -x -H ldapi://%2Fvar%2Frun%2Fldapi

2011-08-28 12:10:27 +0200 - ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)

2011-08-28 12:10:27 +0200 - command: /usr/bin/ldapadd -c -x -H ldapi://%2Fvar%2Frun%2Fldapi

2011-08-28 12:10:27 +0200 - ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)

2011-08-28 12:10:27 +0200 - Could not create the dsproxy record - Unable to create record com.apple.access_dsproxy in /Local/Default.

2011-08-28 12:10:27 +0200 - Attempting to open /LDAPv3/127.0.0.1 node

2011-08-28 12:10:27 +0200 - Opened /LDAPv3/127.0.0.1 node

2011-08-28 12:10:27 +0200 - Authentication to LDAP failed with error - Unable to set node credentials for /LDAPv3/127.0.0.1 with the record name root.

2011-08-28 12:10:27 +0200 - editing ldapreplicas record failed with error Unable to set node credentials for /LDAPv3/127.0.0.1 with the record name root.

2011-08-28 12:10:27 +0200 - command: /usr/sbin/sso_util info -r /LDAPv3/127.0.0.1 -p

2011-08-28 12:10:27 +0200 - sso_util command failed with status 2

2011-08-28 12:10:27 +0200 - removing LDAP admins from local admin group failed with error -14483

2011-08-28 12:10:27 +0200 - Stopping LDAP server (slapd)

2011-08-28 12:10:29 +0200 - Removed file at path /var/db/openldap/openldap-data/__db.001.

2011-08-28 12:10:29 +0200 - Removed file at path /var/db/openldap/openldap-data/__db.002.

2011-08-28 12:10:29 +0200 - Removed file at path /var/db/openldap/openldap-data/__db.003.

2011-08-28 12:10:29 +0200 - Removed file at path /var/db/openldap/openldap-data/__db.004.

2011-08-28 12:10:29 +0200 - Removed file at path /var/db/openldap/openldap-data/__db.005.

2011-08-28 12:10:29 +0200 - Removed file at path /var/db/openldap/openldap-data/__db.006.

2011-08-28 12:10:29 +0200 - Removed file at path /var/db/openldap/openldap-data/DB_CONFIG.

2011-08-28 12:10:29 +0200 - Removed file at path /var/db/openldap/openldap-data/dn2id.bdb.

2011-08-28 12:10:29 +0200 - Removed file at path /var/db/openldap/openldap-data/id2entry.bdb.

2011-08-28 12:10:29 +0200 - Removed file at path /var/db/openldap/openldap-data/log.0000000001.

2011-08-28 12:10:29 +0200 - Removed file at path /etc/openldap/slapd_macosxserver.conf.

2011-08-28 12:10:29 +0200 - Removed file at path /etc/openldap/slapd.conf.

2011-08-28 12:10:29 +0200 - Removed file at path /var/db/dslocal/nodes/Default/groups/com.apple.access_dsproxy.plist.

2011-08-28 12:10:29 +0200 - Removed directory at path /etc/openldap/slapd.d/cn=config.

2011-08-28 12:10:29 +0200 - Removed file at path /etc/openldap/slapd.d/cn=config.ldif.

2011-08-28 12:10:29 +0200 - Removed directory at path /etc/openldap/slapd.d.

2011-08-28 12:10:29 +0200 - Removed directory at path /etc/openldap/slapd.d.backup/cn=config.

2011-08-28 12:10:29 +0200 - Removed file at path /etc/openldap/slapd.d.backup/cn=config.ldif.

2011-08-28 12:10:29 +0200 - Removed directory at path /etc/openldap/slapd.d.backup.

2011-08-28 12:10:29 +0200 - Removed file at path /Library/Preferences/com.apple.openldap.plist.

2011-08-28 12:10:29 +0200 - command: /usr/sbin/kdcsetup -e

2011-08-28 12:10:29 +0200 - command: /bin/launchctl unload -w /System/Library/LaunchDaemons/com.apple.PasswordService.plist

2011-08-28 12:10:33 +0200 - command: /usr/sbin/mkpassdb -u disabled-slot-0x1 -p -q

2011-08-28 12:10:34 +0200 - command: /usr/sbin/mkpassdb -key

2011-08-28 12:10:34 +0200 - Removed file at path /Library/Preferences/com.apple.passwordserver.plist.

2011-08-28 12:10:34 +0200 - Removed file at path /var/run/slapconfig.lock.

Mac OS X (10.7)

Posted on Aug 28, 2011 3:20 AM

Reply

Answer 1

sig

Level 8

35,862 points

Aug 28, 2011 5:45 AM in response to peterkoch

If you google LPAD it would appear that some folks have found an LPAD bug in Lion.

Reply

Answer 2

Aug 28, 2011 10:45 AM in response to peterkoch

I would recommend reverting to your most recent backup, archive the OD database just for good measure, and try applying the update again.

Reply

Answer 3

peterkoch Author

Level 1

0 points

Aug 28, 2011 11:48 AM in response to peterkoch

The server was up and running perfectly over month. Just in preparation for the Lion Update we have installed the update 1.1 over 10.6-8 and finally the OD was broken. Unfortunately we dont have a backup from before the update.

In my opinion there are some congig files missing lige the sladp congig files but we are not sure.

The DNS is set up correctly. We cant access Wikis Blogs neither can we start the links within the Server admin. MAybe because the LDAP and OD are not running.

Very frustrating.

Reply

Answer 4

Aug 28, 2011 12:38 PM in response to peterkoch

If the directory is corrupt, and you don't have a backup, then your only choice is to destroy the OD master, and rebuild OD from scratch.

Reply

Answer 5

Aug 28, 2011 12:39 PM in response to peterkoch

In addition, in the future, I would advise you to make sure you have a good (tested) backup before making changes (and installing updates) to your system.

Reply

Answer 6

peterkoch Author

Level 1

0 points

Aug 28, 2011 12:50 PM in response to peterkoch

Normaly we do, but we have focused on the upgrade to Lion server, which finally ended up in a disaster. How we can reinstall OD without reinstalling the hle server, because there are some config files missing?

Reply

Answer 7

Aug 28, 2011 3:52 PM in response to peterkoch

In Server Admin, Open Directory Service > Settings Pane > General Tab, next to where it says "Role: Open Directory Master" you'll see a button that says "Change..." From there, you will switch to a Standalone directory, rebbot the server, and then change it back to an OD Master.

Once you do this, you will need to set up all of your users and groups from scratch.

Reply

Answer 8

peterkoch Author

Level 1

0 points

Aug 29, 2011 12:16 AM in response to peterkoch

that where the problem starts. the protocoll above shows that when ever you create a new OD Master it fails because of

Starting LDAP server (slapd)

2011-08-28 12:10:24 +0200 - command: /usr/bin/ldapadd -c -x -H ldapi://%2Fvar%2Frun%2Fldapi

2011-08-28 12:10:24 +0200 - ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)

If you do it manualy in the terminal window it states that there are insuffient directory rights to access, even as root.

Is there a way to reinstal just the OD part of the server system and set up everything new?

Reply

Answer 9

Aug 29, 2011 5:35 AM in response to peterkoch

To my knowledge, no.

If I were you, at this point I would back up all data, wipe the drive, install the server OS fresh and then import your data.

Reply

Answer 10

Aug 29, 2011 5:36 AM in response to peterkoch

peterkoch wrote:

If you do it manualy in the terminal window it states that there are insuffient directory rights to access, even as root.

Have you tried running a permissions repar?

Reply