I
found a page on the wiki that helped: http://directory.fedoraproject.org/wiki/Howto:AdminServerLDAPMgmt.
In addition to following the directions under "How to change the user/group LDAP
server", I also had to edit /opt/fedora-ds/slapd-<server>/config/dse.ldif
and change:
under:
dc:
cn=Pass Through Authentication,cn=plugins,cn=config
I
changed:
nssldap-pluginarg0: <url of new
server>
I'm
not sure if the stuff on the wiki page is what did it, or just editing the
dse.ldif... I'm new to this and it is still a bit confusing. But all seems
to be good now. I could log in to the admin console on the second (new)
master. At that point I could have re-enabled the NetscapeRoot on the
other (old) master, but I don't want to - I think at this point I can kill the
old master (?).
From: fedora-directory-users-bounces@xxxxxxxxxx [mailto:fedora-directory-users-bounces@xxxxxxxxxx] On Behalf Of Andrew Kerr
Sent: Thursday, July 09, 2009 2:32 PM
To: fedora-directory-users@xxxxxxxxxx
Subject: [389-users] Re-enable or move NetscapeRoot
We are running
Fedora DS 1.0.4. We have two servers doing master-master on NetscapeRoot
and our user root. The machine that was the original master needs to be
shut down. In preparation for its decommission I changed the user
root to just a consumer, and I disabled NetscapeRoot.
I am now unable to
run the console on the remaining master, since it apparently is still trying to
connect to the old machine's NetscapeRoot. How can I either re-enable
NetscapeRoot on that old machine, or better yet have the console connect to the
other master? When I start the console I give it the administration URL of
the new server, and I thought that was enough - but it
isn't.
Thanks in
advance.
| This message and the information
contained herein is proprietary and confidential and subject to the Amdocs
policy statement, you may review at http://www.amdocs.com/email_disclaimer.asp |
-- 389 users mailing list 389-users@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-directory-users
