It'll be a while before I get to try this, but I wanted to share in case someone else has the time. From what I can tell, slapconfig -mergedb is really a trigger for a bunch of other commands. If you look at the slapconfig.log in /Library/Logs you'll see all the activity that follows a slapconfig -mergedb execution.
Don't expect to be able to just enter the commands below and have it work. For instance /usr/sbin/kdb5_util doesn't exist after 10.6 as Apple is doing Kerberos differently now. This is likely why the -mergedb and -kerberize mods are no longer present. So, the big question is, are there any Kerberos tools in 10.7/10.8 that can provide similar functionality?
The bigger question is, what's really the right way to accomplish a clean OD master with imported users that don't lose their passwords? I feel like I'm barking up the wrong tree here.
From slapconfig.log (each leading "-" is a new line from the log file):
- slapconfig -mergedb
- command: /usr/bin/hdiutil attach /Volumes/Archives/odbu-2_071413.sparseimage -readonly
- Disk name disk4
- command: /usr/bin/defaults write /Library/Preferences/SystemConfiguration/com.apple.smb.server SuspendServices -bool YES
- command: /usr/libexec/samba/synchronize-preferences --force-sync
- 1 Merging Kerberos database
- popen: cd /tmp/slapconfig_restore_stage1393rXXeM6;/usr/bin/tar xzpf /Volumes/ldap_bk/krb5backup.tar.gz, "r"
- command: /usr/sbin/sso_util info -r /LDAPv3/127.0.0.1 -p
- command: /usr/sbin/kdb5_util -r OD.MYCOMPANY.LAN dump -new_mkey_file /tmp/slapconfig_restore_stage1393rXXeM6/var/db/krb5kdc/.k5.OD.MYCOMPANY.LAN /tmp/slapconfig_restore_stage1393rXXeM6/kdb5backup.bak
- Copied directory from /var/db/krb5kdc to /var/db/krb5kdc.pre-merge.
- command: /bin/cp /tmp/slapconfig_restore_stage1393rXXeM6/var/db/krb5kdc/.k5.OD.MYCOMPANY.LAN /var/db/krb5kdc/
- command: /usr/sbin/kdb5_util -r OD.MYCOMPANY.LAN load -update /tmp/slapconfig_restore_stage1393rXXeM6/kdb5dump.OD.MYCOMPANY.LAN.bak
- Error: command failed with exit code 1: /usr/sbin/kdb5_util load /Volumes/ldap_bk/kdb5dump.OD.MYCOMPANY.LAN.bak
- command: /usr/sbin/kdb5_util -r OD.MYCOMPANY.LAN load -update /tmp/slapconfig_restore_stage1393rXXeM6/kdb5backup.bak
- 2 Merging Password Server data
- command: /usr/sbin/mkpassdb -mergeparent /Volumes/ldap_bk/passwordserver_backup/ /Volumes/ldap_bk/id_omitfile
- 3 Merging LDAP database
- Stopping LDAP server (slapd)
- popen: /usr/sbin/slapadd -c -l /tmp/slapconfig_stage1393eJIK41/backup1393.ldif, "w"
- Starting LDAP server (slapd)
- popen: cd /;/usr/bin/tar xzpf /Volumes/ldap_bk/sambabackup.tar.gz, "w"
- Error: command failed with exit code 256: /usr/bin/tar xzpf /Volumes/ldap_bk/sambabackup.tar.gz
- command: /bin/launchctl load /System/Library/LaunchDaemons/smbd.plist
- command: /usr/bin/defaults write /Library/Preferences/SystemConfiguration/com.apple.smb.server SuspendServices -bool NO
- command: /usr/libexec/samba/synchronize-preferences --force-sync
- Removed directory at path /tmp/slapconfig_restore_stage1393rXXeM6.
- Removed directory at path /tmp/slapconfig_stage1393eJIK41.
- command: /usr/bin/hdiutil detach disk4
- Removed file at path /var/run/slapconfig.lock.