Failed to setup Open Directory Replica.

Question

Level 1

0 points

Failed to setup Open Directory Replica.

I have upgraded my SL Server from 10.6.8 to Lion 10.7, but during the server assistance, the migrating OD Service failed, after restarting, the system work fine, but the OD role became Standalone directory.

So I changed it back to Master, and then imported the backup file from Archive, all the service for OD seemed well, but I can not login with the network account.

I tried to upgrade the server to 10.7.2, and the OD service seemed work as I can login with the network account.

After that, I tried to setup the replica to syn the data, but it failed with the "Augment user records", so I searched it and found the command line to setup replica in Terminal, it showed lack of DNS, so I also setup DNS server, and from server admin, all things go through, but the role kept.

Looking into logs, it shows error after the first 3 step: Creating computer record for replica; Updating master's configuration; Creating ldap replicator user. And then, Error retriving primary master (error = 69); Error retrieving kerberos realm; CopyReplicaArray: ldap_search_ext_s failed. Also serval Error found: Unable to locate primary master; Primary master node is nil! Unable to locate ldapreplicas record: 0 (null).

So I searched in forum, it seems it occurred not only in my case, but no solution found.

Is there anyone can help? Thank you in advance!

Mac Pro, Mac OS X (10.7.2)

Posted on Jan 9, 2012 8:13 PM

Reply

Answer 1

Dan From GD Author

Level 1

0 points

Jan 9, 2012 8:21 PM in response to Dan From GD

The following is from Configuration Logs.

slapconfig -createreplica

2012-01-06 05:13:44 +0000 command: /usr/sbin/sso_util info -r /LDAPv3/ldap://10.0.0.10 -p

2012-01-06 05:13:55 +0000 command: /usr/sbin/sso_util info -r /LDAPv3/10.0.0.10 -p

2012-01-06 05:13:55 +0000 1 Creating computer record for replica

2012-01-06 05:14:18 +0000 Added computer password to keychain

2012-01-06 05:14:18 +0000 2 Updating master's configuration

2012-01-06 05:14:18 +0000 3 Creating ldap replicator user

2012-01-06 05:14:19 +0000 Error retriving primary master

2012-01-06 05:14:19 +0000 Error retriving primary master (error = 69)

2012-01-06 05:14:19 +0000 Error retrieving kerberos realm

2012-01-06 05:14:19 +0000 CopyReplicaArray: ldap_search_ext_s failed

2012-01-06 05:14:19 +0000 Error retrieving replica array

2012-01-06 05:14:19 +0000 command: /bin/launchctl unload -w /System/Library/LaunchDaemons/com.apple.opendirectorybackup.plist

2012-01-06 05:14:19 +0000 Deleting Cert Authority related data

2012-01-06 05:14:19 +0000 No intCAIdentity, not removing int CA from keychain

2012-01-06 05:14:19 +0000 command: /bin/launchctl unload -w /System/Library/LaunchDaemons/com.apple.xscertd.plist

2012-01-06 05:14:19 +0000 command: /bin/launchctl unload -w /System/Library/LaunchDaemons/com.apple.xscertd-helper.plist

2012-01-06 05:14:19 +0000 command: /bin/launchctl unload -w /System/Library/LaunchDaemons/com.apple.xscertadmin.plist

2012-01-06 05:14:19 +0000 _destroyLDAPServer: Failed to find computer record named product2.domain.com$: 0 (null)

2012-01-06 05:14:19 +0000 Updating ldapreplicas on primary master

2012-01-06 05:14:19 +0000 Unable to locate primary master

2012-01-06 05:14:19 +0000 Primary master node is nil!

2012-01-06 05:14:19 +0000 Unable to locate ldapreplicas record: 0 (null)

2012-01-06 05:14:19 +0000 Error setting read ldap replicas array: 0 (null)

2012-01-06 05:14:19 +0000 Error setting write ldap replicas array: 0 (null)

2012-01-06 05:14:19 +0000 Could not retrieve xmlplist from ldapreplicas: 0 (null)

2012-01-06 05:14:19 +0000 Error synchronizing ldapreplicas: 0 (null)

2012-01-06 05:14:19 +0000 Removing self from the database

2012-01-06 05:14:19 +0000 Stopping LDAP server (slapd)

2012-01-06 05:14:19 +0000 cleanKeytab: unable to retrieve default realm

2012-01-06 05:14:19 +0000 Removed file at path /Library/Preferences/com.apple.openldap.plist.

Reply

Answer 2

Jan 18, 2012 10:35 AM in response to Dan From GD

Dan, what command are you entering into Terminal? The correct command should be something like this:

sudo slapconfig -createreplica <OD Master IP address or domain name> <directory admin shortname>

Reply

Answer 3

Dan From GD Author

Level 1

0 points

Jan 18, 2012 5:29 PM in response to JeffSchlabach

I just setup the replica in Server Admin, also, I tried the command you showed above, but the same errors shown.

Reply

Answer 4

Apr 4, 2012 10:36 AM in response to Dan From GD

Did you ever get your replica set up correctly? I've tried setting up a replica between 2 lion servers, and I can't get them to connect either, they just error out.

Reply

Answer 5

Dan From GD Author

Level 1

0 points

Apr 4, 2012 8:35 PM in response to JeffSchlabach

I'm not able to solve this problem with all the LDAP kept, but I managed to keep all the network accounts' data by cp them to the other server and keep all the users using the same account resetting their password.

And now, I'm confused by Open Directory Replica, is it just a replica for LDAP? Without the data from network accounts? Do you have any ways to syn the home folder for all the network accounts between two servers?

Reply

Answer 6

Apr 12, 2012 7:12 PM in response to Dan From GD

Hi,

I am also facing issues with OD replica creation.

I am getting below error. Any idea how to resolve this

Hostname XXXX is from Bonjour

Hostname XXXX does not resolve to a configured IP address

10 Adding replica to master

addReplica request failed with status 1073 Unknown Error

addReplica request failed with status 1073 Unknown Error (error = 69)

Reply

Answer 7

Dan From GD Author

Level 1

0 points

Apr 16, 2012 8:00 PM in response to pre_a2012

From the log:

Hostname XXXX is from Bonjour

Hostname XXXX does not resolve to a configured IP address

I think it's the FQDN issue.

Reply